WebAssembly в Kubernetes

apiVersion: node.k8s.io/v1
kind: RuntimeClass
metadata:
  name: wasmedge
handler: wasmedgev1

apiVersion: v1
kind: Pod
metadata:
  name: wasm-app
spec:
  containers:
    - name: wasm-container
      image: my-wasm-app:latest
  runtimeClassName: wasmedge

{{- if .Values.wasm.enabled }}
apiVersion: node.k8s.io/v1
kind: RuntimeClass
metadata:
  name: {{ include "myapp.fullname" . }}-wasmedge
handler: wasmedgev1
{{- end }}

name: Build WASM
 
on: [push, pull_request]
 
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup Rust
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
          target: wasm32-wasip1
          override: true
      - name: Build
        run: cargo build --target wasm32-wasip1 --release
      - name: Upload artifact
        uses: actions/upload-artifact@v3
        with:
          name: app.wasm
          path: target/wasm32-wasip1/release/app.wasm

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: wasm-app-ingress
  annotations:
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/rewrite-target: /$2
spec:
  ingressClassName: nginx
  rules:
    - host: localhost
      http:
        paths:
          - path: /wasm(/|$)(.*)
            pathType: ImplementationSpecific
            backend:
              service:
                name: wasm-app
                port:
                  number: 3000

sync:
  toHost:
    ingresses:
      enabled: true

apiVersion: v1
kind: Service
metadata:
  name: wasm-state-service
spec:
  selector:
    app: state-storage
  ports:
    - port: 8080
      targetPort: 8080
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: state-storage
spec:
  replicas: 1
  selector:
    matchLabels:
      app: state-storage
  template:
    metadata:
      labels:
        app: state-storage
    spec:
      containers:
        - name: redis
          image: redis:alpine
          ports:
            - containerPort: 6379
        - name: redis-adapter
          image: my-redis-http-adapter:latest
          ports:
            - containerPort: 8080

resources:
  limits:
    cpu: "500m"
    memory: "128Mi"
  requests:
    cpu: "100m"
    memory: "64Mi"

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: wasm-app-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: wasm-app
  minReplicas: 1
  maxReplicas: 10
  metrics:
    - type: Pods
      pods:
        metric:
          name: http_requests_per_second
        target:
          type: AverageValue
          averageValue: 100

spec:
  containers:
    - name: wasm-app
      image: my-wasm-app:latest
      ports:
        - containerPort: 3000
    - name: tls-proxy
      image: envoy:latest
      ports:
        - containerPort: 8443
      volumeMounts:
        - name: envoy-config
          mountPath: /etc/envoy
  volumes:
    - name: envoy-config
      configMap:
        name: envoy-config

apiVersion: v1
kind: Namespace
metadata:
  name: wasm-playground
  labels:
    environment: experimental

apiVersion: networking.k8s.io/v1
kind: Service
metadata:
  name: my-service
  annotations:
    traffic-split: "docker:80,wasm:20"  # 20% трафика на WASM-версию
spec:
  selector:
    app: my-app
  ports:
  - port: 80
    targetPort: 8080

{{- if .Values.scheduler.enabled }}
apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "http-monitor.fullname" . }}-scheduler
spec:
  replicas: {{ .Values.scheduler.replicas }}
  selector:
    matchLabels:
      app: {{ include "http-monitor.fullname" . }}-scheduler
  template:
    metadata:
      labels:
        app: {{ include "http-monitor.fullname" . }}-scheduler
    spec:
      {{- if .Values.wasm.enabled }}
      runtimeClassName: wasmedge
      {{- end }}
      containers:
        - name: scheduler
          {{- if .Values.wasm.enabled }}
          image: "{{ .Values.scheduler.image.repository }}:{{ .Values.scheduler.image.tag }}-wasm"
          {{- else }}
          image: "{{ .Values.scheduler.image.repository }}:{{ .Values.scheduler.image.tag }}"
          {{- end }}
          ports:
            - containerPort: 3000
{{- end }}

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: {{ include "http-monitor.fullname" . }}-workers
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: {{ include "http-monitor.fullname" . }}-workers
  minReplicas: {{ .Values.workers.autoscaling.minReplicas }}
  maxReplicas: {{ .Values.workers.autoscaling.maxReplicas }}
  metrics:
    - type: Pods
      pods:
        metric:
          name: checks_per_minute
        target:
          type: AverageValue
          averageValue: {{ .Values.workers.autoscaling.checksPerMinute }}

apiVersion: v1
kind: ConfigMap
metadata:
  name: {{ include "http-monitor.fullname" . }}-config
data:
  config.json: |
    {
      "check_interval": "60s",
      "timeout": "10s",
      "retry_count": 3,
      "notify_channels": ["slack", "email"]
    }

name: Build and Deploy WASM
 
on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
 
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Set up Rust
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable
          target: wasm32-wasip1
          override: true
      
      - name: Build WASM
        run: |
          RUSTFLAGS="--cfg wasmedge --cfg tokio_unstable" cargo build --target wasm32-wasip1 --release
          
      - name: Optimize WASM
        run: |
          curl -sSf [url]https://github.com/WebAssembly/binaryen/releases/download/version_116/binaryen-version_116-x86_64-linux.tar.gz[/url] | tar xzf -
          binaryen-version_116/bin/wasm-opt -O3 target/wasm32-wasip1/release/app.wasm -o app.optimized.wasm
      
      - name: Create minimal container
        run: |
          echo "FROM scratch" > Dockerfile
          echo "COPY app.optimized.wasm /app.wasm" >> Dockerfile
          echo "ENTRYPOINT ["/app.wasm"]" >> Dockerfile
      
      - name: Push to registry
        uses: docker/build-push-action@v2
        with:
          context: .
          push: true
          tags: ghcr.io/myorg/wasm-app:${{ github.sha }}

apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
  name: wasm-apps
  namespace: flux-system
spec:
  interval: 1m
  url: [url]https://github.com/myorg/wasm-apps[/url]
  ref:
    branch: main
---
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: wasm-apps
  namespace: flux-system
spec:
  interval: 5m
  path: "./clusters/production"
  prune: true
  sourceRef:
    kind: GitRepository
    name: wasm-apps
  validation: client

apiVersion: flagger.app/v1beta1
kind: Canary
metadata:
  name: wasm-app
  namespace: prod
spec:
  provider: smi
  targetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: wasm-app
  progressDeadlineSeconds: 60  # Вместо обычных 600 секунд
  service:
    port: 80
    targetPort: 3000
  analysis:
    interval: 15s  # Укороченный интервал для быстрых переключений
    threshold: 10
    maxWeight: 50
    stepWeight: 10
    metrics:
    - name: request-success-rate
      threshold: 99
      interval: 1m
    - name: request-duration
      threshold: 500
      interval: 1m

apiVersion: v1
kind: Service
metadata:
  name: wasm-app
  annotations:
    prometheus.io/scrape: "true"
    prometheus.io/path: "/metrics"
    prometheus.io/port: "3000"
spec:
  selector:
    app: wasm-app
  ports:
  - port: 80
    targetPort: 3000