cloudwalk/fleet-browser

Fleet Browser

这是https://github.com/coreos/fleet/blob/master/Documentation/api-v1.md%E7%9A%84Web%E7%94%A8%E6%88%B7%E7%95%8C%E9%9D%A2%E3%80%82%E9%80%9A%E8%BF%87%E5%AE%83%E5%8F%AF%E4%BB%A5%E8%AE%BF%E9%97%AECoreOS%E9%9B%86%E7%BE%A4%E6%95%B0%E6%8D%AE%E3%80%81%E5%88%9B%E5%BB%BA%E5%B9%B6%E5%90%AF%E5%8A%A8%E6%96%B0%E5%8D%95%E5%85%83%EF%BC%8C%E7%94%9A%E8%87%B3%E5%9C%A8%E9%9B%86%E7%BE%A4%E4%B8%AD%E8%B0%83%E5%BA%A6%E4%BB%BB%E5%8A%A1%E3%80%82

!https://rawgithub.com/cloudwalkio/fleet-browser/master/docs/images/dashboard.png

镜像概述

Fleet Browser是一个可视化工具，旨在简化CoreOS集群的管理操作，通过Web界面与Fleet API交互，降低集群运维的技术门槛。

核心功能

1. 查看CoreOS集群的详细数据
2. 创建并启动集群中的新单元
3. 调度集群内的任务运行
4. 支持自定义登录用户名和密码
5. 可选启用TOTP双因素认证增强安全性

使用场景

• CoreOS集群的可视化管理与监控
• 快速部署和管理集群中的单元服务
• 定时任务在集群内的调度执行

配置说明

在CoreOS集群上启用Fleet API

要使用Fleet API，需配置Fleet通过网络地址提供服务。可通过修改fleet.socket单元实现，例如在cloud-config文件中添加以下内容：

- name: fleet.socket
  drop-ins:
    - name: 30-ListenStream.conf
      content: |
        [Socket]
        ListenStream=8080
        Service=fleet.service
        [Install]
        WantedBy=sockets.target

使用方式

直接运行容器

设置FLEET_ENDPOINT和ETCD_ENDPOINT环境变量，示例：

docker run -d -e FLEET_ENDPOINT=172.17.8.101:8080 -e ETCD_ENDPOINT=172.17.8.101:4001 -p 5000:5000 cloudwalk/fleet-browser

服务启动后可通过http://localhost:5000访问，默认用户名和密码均为admin。

作为单元文件运行

若在CoreOS集群内运行，可使用以下单元文件：

[Unit]
Description=Expose Fleet API in a nice GUI
Requires=docker.service
After=docker.service  

[Service]
EnvironmentFile=/etc/environment
KillMode=none
TimeoutStartSec=0
Restart=always
RestartSec=10s
ExecStartPre=-/usr/bin/docker kill fleet-browser
ExecStartPre=-/usr/bin/docker rm fleet-browser
ExecStartPre=/usr/bin/docker pull cloudwalk/fleet-browser
ExecStart=/usr/bin/docker run --rm --name fleet-browser \
 -e FLEET_ENDPOINT=${COREOS_PRIVATE_IPV4}:8080 \
 -e ETCD_ENDPOINT=${COREOS_PRIVATE_IPV4}:4001 \
 -p 5000:5000 cloudwalk/fleet-browser
ExecStop=/usr/bin/docker stop fleet-browser

自定义登录凭证（可选）

通过环境变量USERNAME和PASSWORD设置自定义用户名和密码：

docker run -d -e FLEET_ENDPOINT=172.17.8.101:8080 \
  -e ETCD_ENDPOINT=172.17.8.101:4001 \
  -e USERNAME=admin -e PASSWORD=your_secure_password \
  -p 5000:5000 cloudwalk/fleet-browser

启用双因素认证（可选）

通过TOTP_KEY启用TOTP双因素认证：

docker run -d -e FLEET_ENDPOINT=172.17.8.101:8080 \
  -e ETCD_ENDPOINT=172.17.8.101:4001 \
  -e TOTP_KEY=AWY7DDYXK5TK6FR6 \
  -p 5000:5000 cloudwalk/fleet-browser

可通过Python生成安全密钥：

python
import base64
import os
print(base64.b32encode(os.urandom(10)).decode())

也可生成QR码方便添加到Authy等应用：

qr "otpauth://totp/fleet-browser?secret=PUTYOURKEYHERE" > fleet-browser-qrcode.png

包含所有安全层的运行命令

docker run -d -e FLEET_ENDPOINT=172.17.8.101:8080 \
  -e ETCD_ENDPOINT=172.17.8.101:4001 \
  -e USERNAME=admin -e PASSWORD=your_secure_password -e TOTP_KEY=AWY7DDYXK5TK6FR6 \
  -p 5000:5000 cloudwalk/fleet-browser

故障排除

Fleet API无法访问

若容器内无法访问Fleet主机（如本地Vagrant环境），可使用--net=host让容器共享主机网络：

docker run -d -e FLEET_ENDPOINT=172.17.8.101:8080 -e ETCD_ENDPOINT=172.17.8.101:4001 -p 5000:5000 --net=host cloudwalk/fleet-browser

许可证

The MIT License (MIT)

Copyright (c) 2015 CloudWalk, Inc.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

===FULL_DESC===