The sync function supports auto scaling based on CPU

Signed-off-by: wanjunlei <[email protected]>

Author: wanjunlei

knative-serving/templates/hpa/deployment.yaml

@@ -0,0 +1,73 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: autoscaler-hpa
+  namespace: knative-serving
+  labels:
+    autoscaling.knative.dev/autoscaler-provider: hpa
+    app.kubernetes.io/component: autoscaler-hpa
+    app.kubernetes.io/name: knative-serving
+    app.kubernetes.io/version: "1.3.2"
+    serving.knative.dev/release: "v1.3.2"
+    {{- include "knative-serving.labels" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      app: autoscaler-hpa
+      {{- include "knative-serving.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      annotations:
+        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
+      labels:
+        app: autoscaler-hpa
+        app.kubernetes.io/component: autoscaler-hpa
+        app.kubernetes.io/name: knative-serving
+        app.kubernetes.io/version: "1.3.2"
+        serving.knative.dev/release: "v1.3.2"
+        {{- include "knative-serving.labels" . | nindent 8 }}
+    spec:
+      # To avoid node becoming SPOF, spread our replicas to different nodes.
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - podAffinityTerm:
+                labelSelector:
+                  matchLabels:
+                    app: autoscaler-hpa
+                topologyKey: kubernetes.io/hostname
+              weight: 100
+      serviceAccountName: controller
+      containers:
+      - name: autoscaler-hpa
+          # This is the Go import path for the binary that is containerized
+          # and substituted here.
+        {{- with .Values.hpa.image }}
+        image: {{ .repository }}:{{ .tag }}
+        {{- end }}
+        resources: {{- toYaml .Values.hpa.resources | nindent 10 }}
+        env:
+        - name: SYSTEM_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: CONFIG_LOGGING_NAME
+          value: config-logging
+        - name: CONFIG_OBSERVABILITY_NAME
+          value: config-observability
+        - name: METRICS_DOMAIN
+          value: knative.dev/serving
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          capabilities:
+            drop:
+            - all
+        ports:
+        - name: metrics
+          containerPort: 9090
+        - name: profiling
+          containerPort: 8008
+
+

knative-serving/templates/hpa/service.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: autoscaler-hpa
+    autoscaling.knative.dev/autoscaler-provider: hpa
+    app.kubernetes.io/component: autoscaler-hpa
+    app.kubernetes.io/name: knative-serving
+    app.kubernetes.io/version: "1.3.2"
+    serving.knative.dev/release: "v1.3.2"
+    {{- include "knative-serving.labels" . | nindent 4 }}
+  name: autoscaler-hpa
+  namespace: knative-serving
+spec:
+  ports:
+    # Define metrics and profiling for them to be accessible within service meshes.
+  - name: http-metrics
+    port: 9090
+    targetPort: 9090
+  - name: http-profiling
+    port: 8008
+    targetPort: 8008
+  selector:
+    app: autoscaler-hpa
+    {{- include "knative-serving.selectorLabels" . | nindent 4 }}

knative-serving/values.yaml

@@ -168,4 +168,15 @@ webhook:
         memory: 500Mi
       requests:
         cpu: 100m
-        memory: 100Mi
+        memory: 100Mi
+hpa:
+  image:
+    repository: gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa
+    tag: v1.3.2
+  resources:
+    requests:
+      cpu: 30m
+      memory: 40Mi
+    limits:
+      cpu: 300m
+      memory: 400Mi

openfunction/templates/manager-rbac.yaml

@@ -3,6 +3,9 @@ kind: ClusterRole
 metadata:
   name: {{ include "openfunction.fullname" . }}-manager-role
   labels:
+    rbac.authorization.k8s.io/aggregate-to-admin: "true"
+    rbac.authorization.k8s.io/aggregate-to-edit: "true"
+    rbac.authorization.k8s.io/aggregate-to-view: "true"
   {{- include "openfunction.labels" . | nindent 4 }}
 rules:
   - apiGroups:

openfunction/values.yaml

@@ -157,6 +157,17 @@ knative-serving:
         requests:
           cpu: 100m
           memory: 100Mi
+  hpa:
+    image:
+      repository: openfunction/knative.dev-serving-cmd-autoscaler-hpa
+      tag: v1.3.2
+    resources:
+      requests:
+        cpu: 30m
+        memory: 40Mi
+      limits:
+        cpu: 300m
+        memory: 400Mi
 shipwright-build:
   shipwrightBuildController:
     shipwrightBuild: