Непрерывное развертывание в Java с Kubernetes

apiVersion: v1
kind: Pod
metadata:
  name: java-app
spec:
  containers:
  - name: java-service
    image: myregistry/myapp:1.0.0
    ports:
    - containerPort: 8080

apiVersion: apps/v1
kind: Deployment
metadata:
  name: java-app
spec:
  replicas: 3
  selector:
    matchLabels:
      app: java-app
  template:
    metadata:
      labels:
        app: java-app
    spec:
      containers:
      - name: java-service
        image: myregistry/myapp:1.0.0
        ports:
        - containerPort: 8080

apiVersion: v1
kind: Service
metadata:
  name: java-app-service
spec:
  selector:
    app: java-app
  ports:
  - port: 80
    targetPort: 8080
  type: ClusterIP

-XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap

readinessProbe:
  httpGet:
    path: /actuator/health
    port: 8080
  initialDelaySeconds: 30
  periodSeconds: 5

lifecycle:
  preStop:
    exec:
      command: ["sh", "-c", "sleep 10 && java -jar /app/shutdown-hook.jar"]

resources:
  requests:
    memory: "512Mi"
    cpu: "500m"
  limits:
    memory: "768Mi"
    cpu: "1000m"

resources:
  requests:
    cpu: "500m"  # 0.5 ядра
  limits:
    cpu: "1500m"  # 1.5 ядра

apiVersion: apps/v1
kind: Deployment
metadata:
  name: java-app
spec:
  replicas: 5
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 1
  selector:
    matchLabels:
      app: java-app
  template:
    metadata:
      labels:
        app: java-app
    spec:
      containers:
      - name: java-service
        image: myregistry/myapp:2.0.0

# Оригинальный сервис (указывает на "синие" поды)
apiVersion: v1
kind: Service
metadata:
  name: java-app-service
spec:
  selector:
    app: java-app
    version: blue
  ports:
  - port: 80
    targetPort: 8080
 
# После тестирования меняем селектор на "зеленые" поды
kubectl patch service java-app-service -p '{"spec":{"selector":{"version":"green"}}}'

# Deployment с новой версией
apiVersion: apps/v1
kind: Deployment
metadata:
  name: java-app-canary
spec:
  replicas: 1  # Всего одна реплика для начала
  selector:
    matchLabels:
      app: java-app
      version: v2
  template:
    metadata:
      labels:
        app: java-app
        version: v2
    spec:
      containers:
      - name: java-service
        image: myregistry/myapp:2.0.0

apiVersion: v1
kind: Service
metadata:
  name: java-app-service
spec:
  selector:
    app: java-app  # Будет выбирать поды и с version: v1, и с version: v2
  ports:
  - port: 80
    targetPort: 8080

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: java-app-vs
spec:
  hosts:
  - java-app-service
  http:
  - route:
    - destination:
        host: java-app-service
        subset: v1
      weight: 90
    - destination:
        host: java-app-service
        subset: v2
      weight: 10

apiVersion: apps/v1
kind: Deployment
metadata:
  name: spring-boot-app
spec:
  replicas: 5
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 2        # Разрешаем создать 2 дополнительных пода
      maxUnavailable: 0  # Не позволяем понижать доступность
  selector:
    matchLabels:
      app: spring-boot
  template:
    metadata:
      labels:
        app: spring-boot
    spec:
      containers:
      - name: spring-boot-service
        image: myregistry/springapp:latest
        readinessProbe:
          httpGet:
            path: /actuator/health
            port: 8080
          initialDelaySeconds: 30  # Даем время на старт Spring
          periodSeconds: 5
          failureThreshold: 3
        lifecycle:
          preStop:
            exec:
              command: ["sh", "-c", "sleep 5"]  # Даем время на закрытие соединений

# Исходная версия с 9 репликами (90% трафика)
apiVersion: apps/v1
kind: Deployment
metadata:
  name: java-app-v1
spec:
  replicas: 9
  selector:
    matchLabels:
      app: java-app
      version: v1
  template:
    metadata:
      labels:
        app: java-app
        version: v1
    spec:
      containers:
      - name: java-service
        image: myregistry/myapp:1.0.0
 
# Новая версия с 1 репликой (10% трафика)
apiVersion: apps/v1
kind: Deployment
metadata:
  name: java-app-v2
spec:
  replicas: 1
  selector:
    matchLabels:
      app: java-app
      version: v2
  template:
    metadata:
      labels:
        app: java-app
        version: v2
    spec:
      containers:
      - name: java-service
        image: myregistry/myapp:2.0.0

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: canary-ingress
  annotations:
    nginx.ingress.kubernetes.io/canary: "true"
    nginx.ingress.kubernetes.io/canary-weight: "20"
spec:
  rules:
  - host: api.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: java-app-v2-service
            port:
              number: 80

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: testing-ingress
  annotations:
    nginx.ingress.kubernetes.io/canary: "true"
    nginx.ingress.kubernetes.io/canary-by-header: "X-Canary"
    nginx.ingress.kubernetes.io/canary-by-header-value: "true"
spec:
  # ... остальная конфигурация ...

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: java-app-routing
spec:
  hosts:
  - java-app-service
  http:
  - match:
    - headers:
        user-agent:
          regex: ".*Mobile.*"
    route:
    - destination:
        host: java-app-service
        subset: v2
  - route:
    - destination:
        host: java-app-service
        subset: v1
      weight: 80
    - destination:
        host: java-app-service
        subset: v2
      weight: 20

readinessProbe:
  httpGet:
    path: /actuator/health/readiness
    port: 8080
  initialDelaySeconds: 45    # Увеличенное время для старта Java-приложения
  periodSeconds: 10
  timeoutSeconds: 3
  successThreshold: 1
  failureThreshold: 5        # Увеличенный порог ошибок для стабильности

livenessProbe:
  httpGet:
    path: /actuator/health/liveness
    port: 8080
  initialDelaySeconds: 120   # Увеличенная задержка для полной инициализации
  periodSeconds: 30
  timeoutSeconds: 5
  failureThreshold: 3

readinessProbe:
  httpGet:
    path: /actuator/health/readiness
    port: 8080
  initialDelaySeconds: 30
  periodSeconds: 5
  timeoutSeconds: 3
  failureThreshold: 5
 
livenessProbe:
  httpGet:
    path: /actuator/health/liveness
    port: 8080
  initialDelaySeconds: 120
  periodSeconds: 30
  timeoutSeconds: 10
  failureThreshold: 4

name: CI/CD for Java App
on:
  push:
    branches: [ main ]
jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    
    - name: Set up JDK
      uses: actions/setup-java@v2
      with:
        java-version: '11'
        distribution: 'adopt'
        
    - name: Build with Maven
      run: mvn package -DskipTests
    
    - name: Run tests
      run: mvn test
    
    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v1
      
    - name: Login to Registry
      uses: docker/login-action@v1
      with:
        registry: ${{ secrets.REGISTRY }}
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
    
    - name: Build and Push
      uses: docker/build-push-action@v2
      with:
        context: .
        push: true
        tags: ${{ secrets.REGISTRY }}/java-app:${{ github.sha }}
    
    - name: Set up Kubectl
      uses: azure/setup-kubectl@v1
      
    - name: Set Kubernetes Context
      uses: azure/k8s-set-context@v1
      with:
        kubeconfig: ${{ secrets.KUBECONFIG }}
    
    - name: Deploy to Kubernetes
      run: |
        sed -i "s|image: ${{ secrets.REGISTRY }}/java-app:.*|image: ${{ secrets.REGISTRY }}/java-app:${{ github.sha }}|" k8s/deployment.yaml
        kubectl apply -f k8s/deployment.yaml
        kubectl rollout status deployment/java-app

management.endpoints.web.exposure.include=prometheus,health,info
management.endpoint.health.show-details=always
management.endpoint.prometheus.enabled=true

apiVersion: v1
kind: ConfigMap
metadata:
  name: java-app-config
data:
  application.properties: |
    server.port=8080
    spring.datasource.url=jdbc:postgresql://postgres:5432/mydb
    logging.level.root=INFO

containers:
name: java-service
  image: myregistry/myapp:2.0.0
  volumeMounts:
  - name: config-volume
    mountPath: /app/config
volumes:
name: config-volume
  configMap:
    name: java-app-config

containers:
name: java-service
  image: myregistry/myapp:2.0.0
  envFrom:
  - configMapRef:
      name: java-app-env-config

apiVersion: v1
kind: ConfigMap
metadata:
  name: java-app-env-config
data:
  SPRING_DATASOURCE_URL: jdbc:postgresql://postgres:5432/mydb
  SPRING_PROFILES_ACTIVE: prod
  JAVA_OPTS: "-Xms512m -Xmx1024m"

apiVersion: v1
kind: Secret
metadata:
  name: java-app-secrets
type: Opaque
data:
  db-password: cGFzc3dvcmQ=  # base64-encoded "password"
  api-key: c2VjcmV0LWtleQ==  # base64-encoded "secret-key"

containers:
name: java-service
  image: myregistry/myapp:2.0.0
  volumeMounts:
  - name: secrets-volume
    mountPath: /app/secrets
    readOnly: true
volumes:
name: secrets-volume
  secret:
    secretName: java-app-secrets

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: java-app-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: java-app
  minReplicas: 3
  maxReplicas: 10
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 70
  - type: Resource
    resource:
      name: memory
      target:
        type: Utilization
        averageUtilization: 80

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: java-app-ingress
  annotations:
    nginx.ingress.kubernetes.io/affinity: "cookie"
    nginx.ingress.kubernetes.io/session-cookie-name: "JSESSIONID"
    nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
    nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
spec:
  rules:
  - host: app.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: java-app-service
            port:
              number: 80

apiVersion: autoscaling.k8s.io/v1
kind: VerticalPodAutoscaler
metadata:
  name: java-app-vpa
spec:
  targetRef:
    apiVersion: "apps/v1"
    kind: Deployment
    name: java-app
  updatePolicy:
    updateMode: "Auto"
  resourcePolicy:
    containerPolicies:
    - containerName: '*'
      minAllowed:
        memory: 256Mi
        cpu: 100m
      maxAllowed:
        memory: 3Gi
        cpu: 2

apiVersion: batch/v1
kind: Job
metadata:
  name: db-migration-job
spec:
  template:
    spec:
      containers:
      - name: flyway
        image: boxfuse/flyway:latest
        args:
        - "-url=jdbc:postgresql://postgres:5432/mydb"
        - "-user=postgres"
        - "-password=password"
        - "migrate"
        volumeMounts:
        - name: migration-volume
          mountPath: /flyway/sql
      volumes:
      - name: migration-volume
        configMap:
          name: db-migrations
      restartPolicy: Never
  backoffLimit: 4

spring.zipkin.baseUrl=http://zipkin:9411
spring.sleuth.sampler.probability=1.0