/en/Recent content in MSP Cloud Native Application Platform on MSP DocumentationHugo -- gohugo.ioen/en/service-mesh/modules/register-center/dashboard/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/register-center/dashboard/Dashboard # Summary # The registry focuses on the operation of the “registry engine”, monitors and measures the registry cluster itself, and provides monitoring and measurement support for its stable operation. In addition, you can view the operation of registered services in the registry. Best Practice # After entering the registry module, you need to pay attention to the quantity statistics of “resource warning” and “recent events”. If a pending event occurs, click to view the details of the specific event./en/service-mesh/modules/serverless/app-dev/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/serverless/app-dev/MSP Serverless platform application development # 1. Sorting out the basic concepts # This article mainly introduces the concept and process of distributed development based on the msp serverless platform. Through the development of wasm as the smallest unit, it is fully applicable to the current distributed development environment. Before we start introducing application development, we need to be familiar with several concepts. Whether it adopts the traditional single application development model, the microservice development model, or serverless, the problems it solves are basically similar, but the names of different models are different./en/container-cloud/modules/observability-center/application-monitoring/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/observability-center/application-monitoring/Application Resource Monitoring # Observe the number of resources (Deployment, StatefulSet, Daemonset, Job, CronJob, pvc, service, ingress, Pods container group) deployed in Kubernetes cluster over a period of time. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Telemetry under the Container Cloud Platform module,click Application Monitoring in the right navigation bar,as shown in the following figure:/en/container-cloud/modules/security-center/cis/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/security-center/cis/Compliance Baseline Scanning(CIS) # Center for Internet Security(CIS) published the benchmark of best practice security recommendations.CIS Kubernetes benchmark is a series of recommendations for configuring Kubernetes to support a reliable security situation.Associated with a specific version of Kubernetes.CIS Kubernetes benchmark is written for the open source Kubernetes distribution,aiming to be used as widely as possible in various distributions. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Security under the Container Cloud Platform module,click Compliance Baseline in the right navigation bar,as shown in the following figure:/en/container-cloud/modules/crds/cloneset/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/crds/cloneset/CloneSet Management # CloneSet Overview # CloneSet controller provides the ability to efficiently manage stateless applications.It can benchmark the native Deployment,but CloneSet provides many enhancements. Check CloneSet List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the CRD under the Container Cloud Platform module Click “CloneSet” to enter the CloneSet list page,as shown in the following figure: Check CloneSet Monitor # The container cloud platform supports viewing the monitoring of CloneSet in the cluster,including cpu usage, memory usage, network outflow rate and network inflow rate./en/container-cloud/modules/workloads/deployment/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/workloads/deployment/Deployment Management # Deployment Overview # Deployment declares the template for Pod and the running strategy that controls Pod and is suitable for deploying stateless applications. Check Deployment List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Workload under the Container Cloud Platform module Click select “Deployments” and enter Deployments list page,as shown in the following figure: Check Deployment Monitoring # The container cloud platform supports viewing the monitoring of all the Pods in the intra-cluster Deployment, including CPU usage,memory usage,network outflow rate,network inflow rate./en/container-cloud/modules/delivery-center/image-repository/image-repository/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/delivery-center/image-repository/image-repository/Image Repository # Overview # The mirror repository is used to directly manage container images,and a single mirror repository can contain different versions of container images.The mirror warehouse belongs to the warehouse group,and inherits the public,private attributes and security scanning trigger mode from the warehouse group. Check Repository List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Image Repository under the Container Cloud Platform module/en/timedatabase/modules/alarm-management/manage/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/alarm-management/manage/Manage # Unified enable/disable management of alarms and precomputation is possible./en/container-cloud/modules/storages/persistentvolume/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/storages/persistentvolume/PersistentVolume # PV Overview # PV describes persistent storage volume,which is mainly defined as a persistent storage directory on the host machine, such as an NFS mount directory. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Storage under the Container Cloud Platform module Click “PV” to enter the PV list page,as shown in the following figure: PV State Description # State Description Avaliable The created PV is Available when it is not bound to PVC Bound When a PVC is Bound to PV,the PVC will enter the bound state Released A PV whose recycling strategy is Retain will change from Bound state to Released state when its bound PVC is deleted./en/timedatabase/modules/compute-engine/record/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/compute-engine/record/Record # Create Record Rules # Here you can preprocess the time series data and add Record rules Associate instance and resource information. To add a rule to a rule group, you need to ensure that the rule group where the rule to be added exists already exists. If it does not exist, you need to create it. Configure Record rules. Examples of custom additions are as follows: { "instance_id": "ts_565082230750187520", "uuid": "c950b2e6-9b53-11eb-b4f9-c28d0e0c8a10", "groups": [ { "file": "cidata-dataworks-system-record./en/service-mesh/modules/gateway-center/routes/routes/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/routes/routes/Routes # The gateway routing module can view the routing information registered in the current gateway and perform corresponding routing management, including: View routing and service information Routing monitoring information Routing WAF policy adjustment Route&Service Info # On the route list page of route management, you can see the route list of the current gateway. We can see the basic information corresponding to each route. Through operation, we can/en/container-cloud/modules/config-managers/secret/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/config-managers/secret/Secret # Secret Overview # Secret is an encrypted resource object that allows you to store authentication information,certificates,private keys,and so on in Secret without having to expose sensitive data to a mirror or Pod definition for greater security and flexibility. Secret is similar to ConfigMap in that they are both key-value pairs and are used in the same way.The difference is that Secret is encrypted and stored,so it is suitable for storing sensitive information./en/container-cloud/modules/svc-ingress/services/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/svc-ingress/services/Services # Service Overview # Users can deploy various containers in Kubernetes.One of them provides Layer 7 network services through HTTP and HTTPS,and the other provides layer 4 network services through TCP and UDP.The Service resource defined by Kubernetes is used to manage the Service access of the tier 4 network in the cluster. View the list of Service # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Service and Route under the Container Cloud Platform module/en/service-mesh/modules/gateway-center/waf/dashboard/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/waf/dashboard/ WAF # Through WAF(Web Application Firewall) dashboard, we can see the operation of platform WAF, including: Event summary (total number, bypass, release, interception, etc.) High frequency event ranking/en/timedatabase/modules/compute-engine/aiops/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/compute-engine/aiops/ AIOPS # Through machine learning algorithms, AI models are established, and by analyzing historical time-series data, future predictions and alarms are made. Currently only the default AIOPS objects are supported, the list is as follows: Service CPU monitoring Service memory monitoring Service network read monitoring Service network write monitoring Registry log backlog log production rate Log consumption rate Redis memory utilization Number of Redis client connections Total number of Redis commands Gateway request volume Gateway throughput/en/container-cloud/modules/delivery-center/application/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/delivery-center/application/Application Market # Overview # The application market is a public application warehouse on the platform.The application market generates application services (CafeDeployment) with one click based on the application templates defined by OAM model. You can quickly create application services by customizing OAM templates. OAM aims to promote the application management technology to the direction of light operation and maintenance through a brand-new model of application definition, operation and maintenance, distribution and delivery./en/service-mesh/modules/serverless/weelink/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/serverless/weelink/MSP Serverless platform on-chain interaction framework # Framework scheme # Architecture # The MSP Serverless programming framework supports user-defined providers. The wasm compiled by the application, that is, the actor, can interact with the provider in a manner similar to local function calls through abi. In this example, we implement the provider of weelink, so that the wasm program can easily interact with the blockchain. abi interface # Defines the abi interface for weelink interaction, which can execute/query any on-chain contract./en/container-cloud/modules/observability-center/cluster-monitoring/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/observability-center/cluster-monitoring/Cluster Monitoring # Cluster monitoring is the monitoring of the core system components (ETCD, APIServer, scheduler, Maste) in Kubernetes cluster. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Telemetry under the Container Cloud Platform module,click Cluster Monitoring in the right navigation bar,as shown in the following figure: The etcd monitoring indicators include: ETCD node information in the cluster, library size, client traffic, gRPC streaming messages, WAL log synchronization time, library synchronization time and Raft proposal./en/container-cloud/modules/config-managers/configmap/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/config-managers/configmap/ConfigMap # ConfigMap Overview # ConfigMap is a resource type used to store configuration information required by applications.It can be used to store key value pairs of configuration data, single attributes, or configuration files. The ConfigMap can be used to decouple configurations for different environments.Compared with environment variables,the ConfigMap referenced in Pod can be updated in real time.When you update the data of the ConfigMap,the ConfigMap referenced in Pod will be updated synchronously./en/container-cloud/modules/workloads/daemonset/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/workloads/daemonset/DaemonSet Management # DaemonSet Overview # DaemonSet is used to deploy background programs residing in the cluster,such as node log collection.DaemonSet guarantees that the specified Pod runs on all or some nodes.When a new node is added to the cluster,there is also an automatic deployment Pod;After a node is removed from the cluster,the Pod is automatically reclaimed. Check DaemonSet List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Workload under the Container Cloud Platform module/en/multi-cloud-container/modules/workloads/deployment/Mon, 01 Jan 0001 00:00:00 +0000/en/multi-cloud-container/modules/workloads/deployment/Deployment # Overview of Application Management(Deployment) # Based on multi-cluster and Federation technology, the cloudy container platform can realize Kubernetes management in different regions and different clouds, support unified global application management, and support full life cycle management such as deployment and deletion of cross-cluster applications based on Kubernetes community cluster Federation standardized interface. Create Applicationo(Deployment) # Operation steps: Enter MSP Multi Cloud Container Platform and select “Workload -Deployment” in the left navigation bar of the host cluster./en/service-mesh/modules/register-center/detail/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/register-center/detail/Engine Details # Through the engine details, you can see more information about the engine, including: The resource information owned by the engine includes nodes and services. The current event overview and details of the engine. The current running status of the engine, including: node resource (CPU, memory) usage trend and sidecar resource (CPU, memory) usage trend. Dashboard # Dashboard Card # This module summarizes the latest events of the current engine, the number of included engine nodes and the number of registered services./en/container-cloud/modules/delivery-center/image-repository/image-synchronization/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/delivery-center/image-repository/image-synchronization/Image Synchronize # Overview # In the past period of time,when transferring images between public clouds, there will be occasional interruption of image transmission.The problem of mirror transmission interruption is multifaceted,and the problem of mirror transmission interruption is combined with the internal situation of the company.Through the mirror synchronization function,the container mirror can be synchronized from the source instance to the target instance,and the cross-public cloud platform is supported./en/container-cloud/modules/svc-ingress/ingresses/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/svc-ingress/ingresses/Ingress # Ingress Overview # Users can deploy various containers in Kubernetes.One of them provides Layer 7 network services through HTTP and HTTPS,and the other provides layer 4 network services through TCP and UDP.An Ingress provides HTTP and HTTPS protocol services on a Layer 7 network and common capabilities on a layer 7 network.An Ingress is a set of rules that allow access to services in a cluster.You can configure forwarding rules./en/service-mesh/modules/gateway-center/waf/logs/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/waf/logs/Logs # Through the logs, we can see the audit records and details of WAF. Logs # Log Detail # By clicking the arrow on the left side of the form, we can see more information: View Full JSON Data # Through JSON, we can view the complete data to help us further understand the details of WAF processing./en/container-cloud/modules/storages/persistentvolumeclaim/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/storages/persistentvolumeclaim/PersistentVolumeClaim # PVC Overview # PVC expresses a request for storage,conceptually similar to Pod.Pod will consume node resources,while PVC application will consume PV resources. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Storage under the Container Cloud Platform module Click “PVC” to enter the PVC list page,as shown in the following figure: PVC State Description # State Description Pending When no qualified PV can be bound to PVC, PVC will be in a Pending state Bound When a PV is Bound to PVC, PVC will enter the bound state Check PVC Details # The container cloud platform supports viewing PVC details in the cluster./en/service-mesh/modules/gateway-center/routes/waf/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/routes/waf/Route WAF # By clicking the “WAF” button in the “route list”, we can control the WAF information of the route. WAF Dashboard # Through the routing WAF overview, we can observe the WAF operation information of the current route, such as event summary. Route waf overview Logs # Through the log, we can see the details of a record, where you can see how WAF handles the corresponding request./en/timedatabase/modules/alarm-management/rules/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/alarm-management/rules/Rules # Here you can create, delete, enable, and disable alarm rules. Create alarm rules # In the list of alarm rules, the process of adding an alarm rule is as follows: Associate instance and resource information. To add a rule to a rule group, you need to ensure that the rule group where the rule to be added exists already exists. If it does not exist, you need to create it./en/timedatabase/modules/alarm-management/history/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/alarm-management/history/ History #/en/container-cloud/modules/observability-center/log-center/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/observability-center/log-center/Log Center # Kubernetes cluster,a cloud platform,integrates log service,which can quickly collect the container logs of Kubernetes cluster,including the standard output of the container and the text files in the container,so that users can better view the logs for analysis. The log center has been optimized into two modules: pod log and node log,which support users to query cluster log information in all aspects. Operating steps: Log in the MSP Platform/en/service-mesh/modules/gateway-center/waf/rulesets/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/waf/rulesets/Platform Ruleset # Through the platform ruleset, we can configure a series of rulesets for routing. Rules # 规则列表 New Rule # Add new rule Tips The rules configured here do not take effect directly on the platform and need to be enabled in the route WAF./en/service-mesh/modules/gateway-center/waf/routes/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/gateway-center/waf/routes/Route WAF # Through the “route WAF” function, we can control the routing with WAF enabled in the platform. New Route WAF # Use the “New Route WAF” function to enable WAF for routing. Route WAF Configuration # View Route WAF for more detail./en/container-cloud/modules/storages/storageclass/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/storages/storageclass/StorageClass # SC Overview # SC is a provider of storage resources,and can also be regarded as a back-end storage driver. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Storage under the Container Cloud Platform module Click “SC” to enter the SC list page,as shown in the following figure: Check SC Details # The container cloud platform supports viewing SC details in the cluster./en/timedatabase/modules/alarm-management/analyze/Mon, 01 Jan 0001 00:00:00 +0000/en/timedatabase/modules/alarm-management/analyze/ Analyze #/en/container-cloud/modules/observability-center/event-center/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/observability-center/event-center/Event Center # On the “Event Center” page,you can filter events according to dimensions such as time, namespace, level, reason, resource type, resource object, etc.,view the summary statistics of core events,and show the data comparison in a period.For example,dashboards such as the total number and distribution of events, node anomalies, Pod OOM, important event trends, and list of abnormal TOP events. Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Telemetry under the Container Cloud Platform module,click Event Center in the right navigation bar,as shown in the following figure:/en/container-cloud/modules/workloads/pod/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/workloads/pod/Container Group (Pods) Management # Container Group (Pods) Overview # Container groups (Pods) are the smallest deployable units in Kubernetes.A container group represents a stand-alone application running instance in Kubernetes,which may consist of a single container or several tightly coupled containers. Check Container Group List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Workload under the Container Cloud Platform module/en/container-cloud/modules/observability-center/cluster-inspection/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/observability-center/cluster-inspection/Cluster Inspection # With the increasing complexity of Kubernetes system and its deployment,the existing observation system will encounter the following problems: As a forward link, monitoring data can’t cover all scenes without dead ends. Even if the monitoring data of each node in the link is normal, the link can’t be 100% available. Consistency of data flattening in kubernetes cluster. In the past,in order to solve the above-mentioned similar problems,such as OOM detection, kubelet anomaly detection, etcd object detection, etc./en/container-cloud/modules/workloads/job/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/workloads/job/Job Management # Job Overview # Job will create 1-N PODs,which will run according to the running rules until the end of the run. Check Job List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Workload under the Container Cloud Platform module Click “Job” to enter the Job list page,as shown in the following figure: Check Job Monitor # The container cloud platform supports viewing the monitoring of jobs in the cluster,including cpu usage, memory usage, network outflow rate and network inflow rate./en/container-cloud/modules/workloads/cronjob/Mon, 01 Jan 0001 00:00:00 +0000/en/container-cloud/modules/workloads/cronjob/CronJob Management # CronJob Overview # CronJob is used to create periodic and repetitive tasks. Check CronJob List # Operating steps: Log in the MSP Platform In the MSP Platform “All Products” navigation bar,click the Workload under the Container Cloud Platform module Click “JCronob” to enter the CronJob list page,as shown in the following figure: Check CronJob Monitor # The container cloud platform supports viewing the monitoring of CronJob in the cluster,including cpu usage, memory usage, network outflow rate and network inflow rate./en/service-mesh/modules/govern-center/traffic/mirror/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/govern-center/traffic/mirror/Traffic Mirror # Traffic mirroring can be applied to different deployment scenarios. The following is explained by two common examples. Example1: Mirror Development Env Traffic # Description # ServiceA calls ServiceB, and we want to upgrade ServiceB from v1 to v2. So, before we release ServiceB v2, we want to test the function in develpment container. v2 has an public access address http://ws-serviceB-gwxxx.oneitfarm.com, and we can use ’traffic mirror’ to copy traffic from production env to development env container./en/service-mesh/modules/govern-center/traffic/route/Mon, 01 Jan 0001 00:00:00 +0000/en/service-mesh/modules/govern-center/traffic/route/Traffic Route # With the help of traffic route, we can carry out different deployment modes. Canary Deployment # Description # A calls B, and after B release V2, allow 10% traffic to V2. After the 10% traffic runs ok, increase the V2 instances and traffic percent. After all traffics runs ok in V2, we can offline the old version service, and finish the deployment. Deployment Steps # Config traffic route before deploying v2 { "to_unique_id": "testBBB", "last_update_time": 1618458126111, "routers": [ { "match": { "prefix": "*" # Match all traffic }, "routes": [ { "metadata": { "version": "v1.