bhaab01/openshiftmonitor

CA APM OpenShift Monitor

CA APM OpenShift Monitor是一个扩展工具，用于提供对通过OpenShift部署的主机和应用的全面监控洞察。使用该扩展可监控容器化应用、进程和云实例的可用性与性能，实时管理Docker和Kubernetes容器集群中主机与应用之间的依赖关系，并利用收集的指标数据优化环境的伸缩。

支持的标签

标签内容

latest

• 指向2.0标签

2.0

• 支持Kubernetes Pod的节流指标
• 支持CPU利用率（mCore）和内存缓存及RSS指标
• 解决因频繁伸缩导致的潜在指标爆炸问题
• 集群节点指标
• OpenShift DeploymentConfig的健康状态
• 缺陷修复

1.0

• OpenShift Monitor的初始版本

安装

• 创建名为"caapm"的项目

oc new-project caapm

• 下载镜像流

基于CentOS：

oc import-image my-ca/apm-openshiftmonitor --from=docker.io/caapm/openshiftmonitor:latest --confirm

基于RHEL：

oc import-image my-ca/apm-openshiftmonitor --from=registry.connect.redhat.com/ca/apm-openshiftmonitor --confirm

• 通过YML文件安装

oc create -f caagent-openshiftmonitor.yml -n caapm

注意 :

• 以下YML文件包含部署和守护进程集，容器需要以特权模式运行。
  运行上述命令前，请确保您已获得OpenShift管理员授予的所需角色。
  ( [***] )

• 添加策略以允许用户以特权模式运行容器 oc adm policy add-scc-to-user privileged -z default

• 替换以下变量为您的设置详情

[AGENTMANAGER_URL]  : Agent/EM连接详情 - 类似于IntroscopeAgent.profile中的配置
[AGENTMANAGER_CREDENTIAL] : 连接任何SaaS实例所需的Agent Manager凭据 
[OPENSHIFT_CONNECTION_URL] : OpenShift连接详情。可通过运行oc config view获取
[APITOKEN] : 连接URL的API Token。请参见下文“如何获取APITOKEN”部分
[registry_url] : OpenShift registry详情。请参见“如何获取registry详情”部分

caagent-openshiftmonitor.yml内容

apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: caagent
  labels:
    tier: monitoring
    app: caagent
    version: v1

spec:
  # oc adm policy add-scc-to-user privileged -z default
  template:
    metadata:
      labels:
        app: caagent
    spec:
      hostPID: true
      hostIPC: true
      hostNetwork: true
      containers:
        - resources:
          securityContext:
            privileged: true

          env:
            - name: containerflow
              value: enabled
            - name: agentManager_url_1
              value: [AGENTMANAGER_URL]
            - name: agentManager_credential
              value: [AGENTMANAGER_CREDENTIAL]
            - name: type
              value: Openshift
            - name: interval
              value: "60"

          name: podmonitor
          image: [registry_url]/caapm/apm-openshiftmonitor:latest
          imagePullPolicy: Always
          resources:
            limits:
              cpu: 500m
              memory: 700Mi
            requests:
              cpu: 200m
              memory: 300Mi

          volumeMounts:
            - name: dockersock
              mountPath: /var/run/docker.sock
            - name: proc
              mountPath: /host/proc
            - name: dev
              mountPath: /host/dev
            - name: sys
              mountPath: /host/sys
            - name: boot
              mountPath: /host/boot
            - name: home
              mountPath: /host/home
            - name: var
              mountPath: /host/var
            - name: run
              mountPath: /host/run
  
      volumes:
        - name: dockersock
          hostPath:
            path: /var/run/docker.sock
        - name: proc
          hostPath:
            path: /proc
        - name: dev
          hostPath:
            path: /dev
        - name: sys
          hostPath:
            path: /sys
        - name: boot
          hostPath:
            path: /boot
        - name: home
          hostPath:
            path: /home
        - name: var
          hostPath:
            path: /var
        - name: run
          hostPath:
            path: /run
---
apiVersion: v1
kind: DeploymentConfig
metadata:
  name: caagent-deployment
  labels:
    tier: monitoring
    app: caagent_v2
    version: v1

spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: caagent_v2
    spec:
      containers:
        - resources:
          securityContext:
            privileged: true

          env:
            - name: agentManager_url_1
              value: [AGENTMANAGER_URL]
            - name: agentManager_credential
              value: [AGENTMANAGER_CREDENTIAL]
            - name: connectionurl
              value: [OPENSHIFT_CONNECTION_URL]
            - name: apitoken
              value: [APITOKEN]
            - name: type
              value: Openshift
            - name: HostMonitoring
              value: disabled
            - name: MIN_HEAP_VAL_IN_MB
              value: "400"
            - name: MAX_HEAP_VAL_IN_MB
              value: "800"
        
          name: osemetainfo
          image: [registry_url]/caapm/apm-openshiftmonitor:latest
          resources:
            limits:
              cpu: 700m
              memory: 1000Mi
            requests:
              cpu: 400m
              memory: 500Mi
          imagePullPolicy: Always

          

如何获取APITOKEN

• 在"default"命名空间创建服务账户

oc login -u system:admin
oc project default
oc create sa caapm

• 添加cluster-reader角色

oc adm policy add-cluster-role-to-user cluster-reader system:serviceaccount:default:caapm

• 获取token

oc sa get-token -n default caapm

如何获取registry详情

• 识别docker-registry服务

oc login -u system:admin
oc get svc -n default

• 示例输出如下

NAME              CLUSTER-IP       EXTERNAL-IP   PORT(S)                   AGE
docker-registry   172.30.1.1       <none>        5000/TCP                  9d

• 此处registry_url为

172.30.1.1:5000