Kubernetes降本增效实战指南

一、资源精细化管控（某电商节省40%资源成本）

1. 智能资源分配系统

# VPA自动推荐配置
apiVersion: autoscaling.k8s.io/v1
kind: VerticalPodAutoscaler
metadata:
  name: vpa-recommender
spec:
  targetRef:
    apiVersion: "apps/v1"
    kind: Deployment
    name: product-service
  updatePolicy:
    updateMode: "Off" # 先观察模式

优化步骤：

1. 部署VPA收集历史数据
2. 分析推荐值调整requests/limits
3. 逐步应用优化配置

2. 混部调度策略

# 批处理与在线服务混部
apiVersion: scheduling.k8s.io/v1
kind: PriorityClass
metadata:
  name: batch-job
value: 1000
preemptionPolicy: Never # 禁止抢占

apiVersion: batch/v1
kind: Job
spec:
  template:
    spec:
      priorityClassName: batch-job
      tolerations:
      - key: node-type
        operator: Equal
        value: mixed

二、弹性伸缩体系构建

1. 多层次伸缩方案

2. 生产级HPA配置

apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: intelligent-hpa
spec:
  behavior:
    scaleDown:
      stabilizationWindowSeconds: 300 # 缩容冷却
      policies:
      - type: Percent
        value: 20
        periodSeconds: 60
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 60
  - type: External
    external:
      metric:
        name: requests_per_second
      target:
        type: AverageValue
        averageValue: 1000

三、存储成本优化实战

1. 存储方案选型矩阵

2. PV动态回收策略

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: cost-optimized
provisioner: ebs.csi.aws.com
parameters:
  type: gp3
  iops: "3000"
  throughput: "125"
reclaimPolicy: Delete
volumeBindingMode: WaitForFirstConsumer

四、网络成本控制技巧

1. 流量压缩方案

# Istio数据面配置
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: gzip-filter
spec:
  configPatches:
  - applyTo: HTTP_FILTER
    patch:
      operation: INSERT_BEFORE
      value:
        name: envoy.filters.http.gzip
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.http.gzip.v3.Gzip
          memory_level: 9
          compression_level: BEST_COMPRESSION

2. CDN智能缓存

# 缓存策略注解示例
annotations:
  nginx.ingress.kubernetes.io/proxy-buffering: "on"
  nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
  nginx.ingress.kubernetes.io/proxy-buffers-number: "8"

五、运维自动化体系

1. 智能运维机器人

# 自动清理僵尸Pod
def clean_terminated_pods():
    pods = v1.list_pod_for_all_namespaces(
        field_selector="status.phase=Failed"
    )
    for pod in pods.items:
        if (datetime.now() - pod.status.start_time).days > 3:
            v1.delete_namespaced_pod(
                pod.metadata.name,
                pod.metadata.namespace
            )

2. CI/CD成本优化

// Jenkinsfile优化片段
pipeline {
    agent {
        kubernetes {
            yaml '''
            spec:
              containers:
              - name: jnlp
                resources:
                  requests:
                    cpu: "100m"
                    memory: "256Mi"
            '''
        }
    }
    stages {
        stage('Build') {
            steps {
                container('buildkit') {
                    sh 'docker build --squash .'
                }
            }
        }
    }
}

六、监控与成本分析

1. 成本监控看板

# 按命名空间成本分析
SELECT 
    namespace,
    SUM(cpu_cost) as cpu_cost,
    SUM(memory_cost) as memory_cost,
    SUM(volume_cost) as storage_cost
FROM kube_cost_data
WHERE date = '2023-08'
GROUP BY namespace
ORDER BY total_cost DESC
LIMIT 10;

2. 异常检测规则

# Prometheus告警规则
- alert: CostAnomaly
  expr: |
    (kube_pod_container_resource_requests_cpu_cores * 0.02)
    + (kube_pod_container_resource_requests_memory_bytes * 0.000000002)
    > on(pod) kube_pod_container_resource_usage_cpu_cores
    + kube_pod_container_resource_usage_memory_bytes * 0.000000002
  for: 1h
  labels:
    severity: critical
  annotations:
    summary: "成本异常: {{ $labels.pod }}"

七、组织协同优化

1. 资源配额分级模型

apiVersion: v1
kind: ResourceQuota
metadata:
  name: team-quota
spec:
  hard:
    requests.cpu: "100"
    requests.memory: 200Gi
    limits.cpu: "200"
    limits.memory: 400Gi
  scopeSelector:
    matchExpressions:
    - operator: In
      scopeName: PriorityClass 
      values: ["normal"]

2. 成本意识培养计划

• 月度资源使用报告
• 成本优化黑客松
• 部门成本排行榜
• 资源回收奖励机制

某视频平台通过该方案实现：资源利用率从35%提升至68%，年度云成本降低2300万元。

记住：真正的成本优化不是简单的缩减资源，而是建立可持续的效能提升体系。从技术架构到组织流程，每个环节都蕴含优化机会。