制，并且对交付人员要求高，人员成本上升 来看看社区的解法 Terraform优势 • IaC：⾯向终态IaC⽅式的云资源编排。 ⽅便GitOps集成，DevOps⾃动化容易。 • ⽣态：强⼤的社区Provider Plugins⽣ 态⼒量 Crossplane优势 • Kubernetes：使⽤Kubernetes add-on 将集群打造为通⽤控制平⾯。 • 跨⼚商：⽀持多个⼚商基础设施资源 的管理· Terraform不⾜之处 delivered anywhere CNBaaS Overview CNBaaS Registry Service Definitions Components Specifications Plugins(IaC+Runtime) Manage DSL IaC Engine Schema | Validator | Adapter Execute Plan Scheduler OpenAPI Resource Component Custom Resource Service Custom Resource Versoin Versoin Cutom Resource CNBaaS Plugins Repository AliCloud Plugin AWS Plugin …… CNBaaS Operator CNBaaS Controllers ServiceController

“enqueue, reclaim, preempt, allocate, backfill" tiers: - plugins: - name: priority - name: gang enablePreemptable: false - name: conformance - plugins: - name: overcommit - name: drf enablePreemptable: "MPI" spec: # minimum number of pods need to be started minAvailable: 3 schedulerName: volcano plugins: # job level ssh trust ssh: [] # define network relevant info for running, # hosts, headless services PodGroup Pod PodGroup Pod JobInfo Predicate, allocate, preempt are Actions, and they’re pluggable Plugins on demand reclaim Re-construct JobInfo in Cache by PodGroup Job JobSpec 用户案例：荷兰ING银行大数据平台云原生化改造

`json:"template_version"` Components []*Component `json:"apps"` Plugins []*Plugin `json:"plugins,omitempty"` AppConfigGroups []*AppConfigGroup `json:"app_config_groups

比如把云原生的OAM AppConfig嵌入到Ansible 的PlayBook中。 Host Inventory 主机清单 PlayBooks 剧本 核心模块 自定义模块 Plugins Email、logging、 other 插件 Ansible 负责解析剧本并通过连 接器执行 Connector 连接受控端 主机 主机 主机 DevOps-CICD 软件制品库 Docker引擎安装包、K8S安