# 微服务架构挑战
microservices_challenges:
  communication_complexity:
    description: "服务间通信复杂性"
    issues:
      - 服务发现困难
      - 负载均衡复杂
      - 超时和重试机制
      - 故障处理复杂
    
  observability_gaps:
    description: "可观察性不足"
    issues:
      - 缺乏统一监控视图
      - 跨服务追踪困难
      - 流量可视化不足
      - 性能瓶颈难定位
    
  security_vulnerabilities:
    description: "安全风险"
    issues:
      - 通信未加密
      - 身份认证缺失
      - 授权控制不足
      - 安全策略难实施
    
  operational_overhead:
    description: "运维复杂性"
    issues:
      - 配置管理复杂
      - 版本升级困难
      - 流量控制复杂
      - 故障排查耗时

# Telemetry V2架构特点
telemetry_v2_features:
  in-proxy_processing:
    description: "代理内处理"
    benefits:
      - 减少组件依赖
      - 提升处理性能
      - 降低延迟
    
  wasm_extensions:
    description: "WASM扩展"
    benefits:
      - 可插拔架构
      - 动态配置更新
      - 自定义处理逻辑
    
  unified_telemetry:
    description: "统一遥测"
    benefits:
      - 统一数据格式
      - 一致处理流程
      - 简化配置管理

# Envoy日志类型
envoy_log_types:
  access_logs:
    description: "访问日志"
    purpose: "记录HTTP和TCP请求的详细信息"
    format: "可配置的文本或JSON格式"
    
  application_logs:
    description: "应用日志"
    purpose: "Envoy代理自身的运行日志"
    format: "结构化日志格式"
    
  admin_logs:
    description: "管理日志"
    purpose: "通过管理接口获取的诊断信息"
    format: "JSON格式"

# Prometheus自动发现配置
apiVersion: v1
kind: ConfigMap
metadata:
  name: prometheus-config
  namespace: istio-system
data:
  prometheus.yml: |
    global:
      scrape_interval: 15s
      evaluation_interval: 15s
    
    rule_files:
      - "istio_rules.yml"
    
    scrape_configs:
    # Istio网格指标
    - job_name: 'istio-mesh'
      kubernetes_sd_configs:
      - role: endpoints
        namespaces:
          names:
          - istio-system
      relabel_configs:
      - source_labels: [__meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]
        action: keep
        regex: istiod;http-monitoring
    
    # Envoy代理指标
    - job_name: 'envoy-stats'
      kubernetes_sd_configs:
      - role: pod
      relabel_configs:
      - source_labels: [__meta_kubernetes_pod_container_name]
        action: keep
        regex: 'istio-proxy'
      - source_labels: [__meta_kubernetes_pod_name]
        action: replace
        target_label: pod_name
      - source_labels: [__meta_kubernetes_namespace]
        action: replace
        target_label: namespace
    
    # 应用指标
    - job_name: 'kubernetes-pods'
      kubernetes_sd_configs:
      - role: pod
      relabel_configs:
      - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]
        action: keep
        regex: true
      - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]
        action: replace
        target_label: __metrics_path__
        regex: (.+)
      - source_labels: [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
        action: replace
        regex: ([^:]+)(?::\d+)?;(\d+)
        replacement: $1:$2
        target_label: __address__
      - action: labelmap
        regex: __meta_kubernetes_pod_label_(.+)
      - source_labels: [__meta_kubernetes_namespace]
        action: replace
        target_label: kubernetes_namespace
      - source_labels: [__meta_kubernetes_pod_name]
        action: replace
        target_label: kubernetes_pod_name

# 追踪核心概念
tracing_concepts:
  trace:
    description: "追踪"
    definition: "一个分布式请求从开始到结束的完整调用链路"
    
  span:
    description: "跨度"
    definition: "一个工作单元，代表一个操作的执行过程"
    attributes:
      - trace_id: 追踪标识符
      - span_id: 跨度标识符
      - parent_span_id: 父跨度标识符
      - operation_name: 操作名称
      - start_time: 开始时间
      - end_time: 结束时间
      - tags: 标签信息
      - logs: 日志事件
      
  context_propagation:
    description: "上下文传播"
    definition: "在服务间传递追踪上下文信息的机制"
    mechanisms:
      - HTTP头传播
      - gRPC元数据传播
      - 消息队列上下文传播