Progressive Delivery in Kubernetes: Blue-Green and Canary Deployments

Progressive delivery is the next step after continuous delivery, where new versions are deployed to a subset of users and are evaluated in terms of correctness and performance before rolling them to the totality of the users and rolled back if not matching some key metrics.

There are some interesting projects that make this easier in Kubernetes, and I’m going to talk about three of them that I took for a spin with a Jenkins X example project : Shipper, Istio and Flagger.

Shipper is a project from booking.com extending Kubernetes to add sophisticated rollout strategies and multi-cluster orchestration (docs ). It supports deployments from one to multiple clusters and allows multi-region deployments.

Shipper is installed with a CLI shipperctl , that pushes the configuration of the different clusters to manage. Note this issue with GKE contexts.

Shipper uses Helm packages for deployment but they are not installed with Helm, so they won’t show in the helm list. Also, deployments must be version apps/v1 or shipper will not edit the deployment to add the right labels and replica count.

Rollouts with Shipper are all about transitioning from an old Release , the incumbent , to a new Release , the contender . This is achieved by creating a new Application object that defines the n stages that the deployment goes through. For example, for a 3 step process:

1. Staging: Deploy the new version to one pod, with no traffic.

2. 50/50: Deploy the new version to 50% of the pods and 50% of the traffic.

3. Full on: Deploy the new version to all the pods and all the traffic.

If a step in the release does not send traffic to the pods they can be accessed with kubectl port-forward, ie. kubectl port-forward mypod 8080:8080, which is useful for testing before users can see the new version.

Shipper supports the concept of multiple clusters, but treats all clusters the same way, only using regions and filter by capabilities (set in the cluster object), so there’s no option to have dev, staging, prod clusters with just one Application object. But we could have two application objects:

• myapp-staging deploys to region “staging ”.

• myapp deploys to other regions.

In GKE you can easily configure a multi-cluster ingress that will expose the service running in multiple clusters and serve from the cluster closest to your location.

The main limitations in Shipper:

• Chart restrictions: The Chart must have exactly one Deployment object. The name of the Deployment should be templated with {{.Release.Name}}. The Deployment object should have apiVersion: apps/v1.

• Pod-based traffic shifting: there is no way to have fine grained traffic routing, ie. send 1% of the traffic to the new version, it is based on the number of pods running.

• New Pods don’t get traffic if Shipper is not working

Istio is not a deployment tool but a service mesh . However, it is interesting as it has become very popular and allows traffic management, for example sending a percentage of traffic to a different service and other advanced networking.

In GKE it can be installed by just checking the box to enable Istio in the cluster configuration. In other clusters, it can be installed manually or with Helm .

With Istio we can create a Gateway that processes all external traffic through the Ingress Gateway and create VirtualServices that manage the routing to our services. In order to do that, just find the ingress gateway ip address and configure a wildcard DNS for it. Then create the Gateway that will route all external traffic through the Ingress Gateway

Istio does not manage the app lifecycle, just the networking. We can create a Virtual Service to send 1% of the traffic to the service deployed in a pull request or in the controller branch, for all requests coming to the Ingress Gateway.

Flagger is a project sponsored by WeaveWorks using Istio to automate canarying and rollbacks using metrics from Prometheus. It goes beyond what Istio provides to automate progressive rollouts and rollbacks based on metrics.

Flagger requires Istio installed with Prometheus, Jaeger, Servicegraph and configuration of some systems, plus the installation of the Flagger controller itself. It also offers Grafana dashboard to monitor the deployment progress.

The deployment rollout is defined by a canary object that will generate primary and canary deployment objects. When the deployment is edited, for instance, to use a new image version, the Flagger controller will shift the loads from 0% to 50% with 10% increases every minute, then it will shift to the new deployment or rollback if metrics such as response errors and request duration fail.

This table summarizes the strengths and weaknesses of both Shipper and Flagger in terms of a few Progressive Delivery features.

To sum up, I see Shipper’s value on multi-cluster management and simplicity, not requiring anything other than Kubernetes, but it comes with some serious limitations.

Flagger really goes the extra mile automating the rollout and rollback, and fine grain control over traffic, at a higher complexity cost with all the extra services needed (Istio, Prometheus).

Find the example code for Shipper , Istio and Flagger .

• Read how one developer migrated from Jenkins to Jenkins X .