01 Mar 2020 在ocp上使用prometheus监控用户应用
01 Mar 2020 在ocp上使用prometheus监控用户应用
俊采
发布于 2023-10-17 10:41:53
发布于 2023-10-17 10:41:53
文章被收录于专栏：LEo的网络日志
启用监控用户应用的功能
在cluster-monitoring-config中添加以下字段：
data:
config.yaml: |
techPreviewUserWorkload:
enabled: true编辑cluster-monitoring-config，然后查询：
oc -n openshift-monitoring edit configmap cluster-monitoring-config
oc get configmap cluster-monitoring-config -oyaml
apiVersion: v1
data:
config.yaml: |
techPreviewUserWorkload:
enabled: true
kind: ConfigMap
metadata:
creationTimestamp: "2020-02-28T09:19:16Z"
name: cluster-monitoring-config
namespace: openshift-monitoring
resourceVersion: "2548521"
selfLink: /api/v1/namespaces/openshift-monitoring/configmaps/cluster-monitoring-config
uid: fb71b542-80a3-4d73-ad06-0092d56e7ddf修改完毕后，查询相关prometheus-user-workload pod已经启动：
[root@ssli-ocp1-inf ~]# oc -n openshift-user-workload-monitoring get pod
NAME READY STATUS RESTARTS AGE
prometheus-operator-5598448b4-t8fcb 1/1 Running 0 55s
prometheus-user-workload-0 5/5 Running 1 43s
prometheus-user-workload-1 5/5 Running 1 43s部署用户应用
相应的yaml如下：
apiVersion: v1
kind: Namespace
metadata:
name: ns1
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: prometheus-example-app
name: prometheus-example-app
namespace: ns1
spec:
replicas: 1
selector:
matchLabels:
app: prometheus-example-app
template:
metadata:
labels:
app: prometheus-example-app
spec:
containers:
- image: quay.io/brancz/prometheus-example-app:v0.2.0
imagePullPolicy: IfNotPresent
name: prometheus-example-app
---
apiVersion: v1
kind: Service
metadata:
labels:
app: prometheus-example-app
name: prometheus-example-app
namespace: ns1
spec:
ports:
- port: 8080
protocol: TCP
targetPort: 8080
name: web
selector:
app: prometheus-example-app
type: ClusterIP部署应用并查询prometheus-example-app pod：
oc create ns ns1
oc apply -f prometheus-example-app.yaml
oc -n ns1 get pod创建相应的role
相应的yaml如下：
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: monitor-crd-edit
rules:
- apiGroups: ["monitoring.coreos.com"]
resources: ["prometheusrules", "servicemonitors", "podmonitors"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]创建role：
oc apply -f custom-metrics-role.yaml创建相应的role binding
通过ocp门户，进入role里面创建相应的role binding。
设置指标收集
创建相应的service monitor，相应的yaml如下：
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
labels:
k8s-app: prometheus-example-monitor
name: prometheus-example-monitor
namespace: ns1
spec:
endpoints:
- interval: 30s
port: web
scheme: http
selector:
matchLabels:
app: prometheus-example-app创建service monitor：
oc apply -f example-app-service-monitor.yaml
oc -n ns1 get servicemonitor创建告警规则
相应的yaml如下：
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: example-alert
namespace: ns1
spec:
groups:
- name: example
rules:
- alert: VersionAlert
expr: version{job="prometheus-example-app"} == 0创建告警规则：
oc apply -f example-app-alerting-rule.yaml赋予用户view权限
oc policy add-role-to-user view ssli-test1 -n ns1ref:
https://docs.openshift.com/container-platform/4.3/monitoring/monitoring-your-own-services.html
LEo at 12:12
本文参与 腾讯云自媒体同步曝光计划，分享自作者个人站点/博客。
如有侵权请联系 cloudcommunity@tencent.com 删除
评论
登录后参与评论
推荐阅读
目录
腾讯云开发者
