AWS

[ 10 ] - prometheus

zhuxiclover 2024. 10. 2. 16:40

1.  prometheus 설치

envsubst < monitor-values.yaml | helm install kube-prometheus-stack prometheus-community/kube-prometheus-stack27.2 --set prometheus.prometheusSpec.scrapeInterval='15s' --set prometheus.prometheusSpec.evaluationInterval='15s' -f - --namespace monitoring

 

 

 ➜  kubectl get ingress -n monitoring

 

 

 

2.  External Dns

 ➜  nano externaldns.yaml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: external-dns
  namespace: kube-system
  labels:
    app.kubernetes.io/name: external-dns
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: external-dns
  labels:
    app.kubernetes.io/name: external-dns
rules:
  - apiGroups: [""]
    resources: ["services","endpoints","pods","nodes"]
    verbs: ["get","watch","list"]
  - apiGroups: ["extensions","networking.k8s.io"]
    resources: ["ingresses"]
    verbs: ["get","watch","list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: external-dns-viewer
  labels:
    app.kubernetes.io/name: external-dns
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: external-dns
subjects:
  - kind: ServiceAccount
    name: external-dns
    namespace: kube-system # change to desired namespace: externaldns, kube-addons
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: external-dns
  namespace: kube-system
  labels:
    app.kubernetes.io/name: external-dns
spec:
  strategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app.kubernetes.io/name: external-dns
  template:
    metadata:
      labels:
        app.kubernetes.io/name: external-dns
    spec:
      serviceAccountName: external-dns
      containers:
        - name: external-dns
          image: registry.k8s.io/external-dns/external-dns:v0.13.4
          args:
            - --source=service
            - --source=ingress
            - --domain-filter=thrillionx.click # will make ExternalDNS see only the hosted zones matching provided domain, omit to process all available hosted zones
            - --provider=aws
            - --policy=upsert-only # would prevent ExternalDNS from deleting any records, omit to enable full synchronization
            - --aws-zone-type=public # only look at public hosted zones (valid values are public, private or no value for both)
            - --registry=txt
            - --txt-owner-id=Z03277773PBC0HOIVXLL5
          env:
            - name: AWS_DEFAULT_REGION
              value: ap-northeast-2 # change to region where EKS is installed

 

    ✅  kubectl apply -f externaldns.yaml

 

 ➜  kubectl get po -n kube-system | grep external

 

 ➜   kubectl get ingress -n monitoring

 

 

 ➜  레코드 확인

 

 

 

3.  Monitoring

 ➜  nano netshoot.yaml [ 아래 코드 명령어에 그대로 연결하면 ok ]

cat <<EOF | kubectl create -f -
apiVersion: v1
kind: Pod
metadata:
  name: netshoot-pod
spec:
  containers:
  - name: netshoot-pod
    image: nicolaka/netshoot
    command: ["tail"]
    args: ["-f", "/dev/null"]
  terminationGracePeriodSeconds: 0
EOF
pod/netshoot-pod created

 

 

 ➜  kubectl exec -it netshoot-pod -- nslookup kube-prometheus-stack-prometheus.monitoring

 

 

 ➜  kubectl get pod netshoot-pod

 

 

 ➜  curl -s http://192.168.1.187:8080/metrics | head

 

 

 ➜  nginx 올리기

cat <<EOT > nginx-values.yaml
service:
    type: NodePort

ingress:
  enabled: true
  ingressClassName: alb
  hostname: nginx.$MyDomain
  path: /*
  annotations: 
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}, {"HTTP":80}]'
    alb.ingress.kubernetes.io/certificate-arn: $CERT_ARN
    alb.ingress.kubernetes.io/success-codes: 200-399
    alb.ingress.kubernetes.io/load-balancer-name: $CLUSTER_NAME-ingress-alb
    alb.ingress.kubernetes.io/group.name: study
    alb.ingress.kubernetes.io/ssl-redirect: '443'

metrics:
  enabled: true

  service:
    port: 9113

  serviceMonitor:
    enabled: true
    namespace: monitoring
    interval: 10s
EOT

 

    ✅  helm install nginx bitnami/nginx --version 14.1.0 -f nginx-values.yaml --namespace <namespace>

 

 ➜  kubectl get all,ingress -n monitoring

 ➜  kubectl get svc,ep -n monitoring kube-prometheus-stack-prometheus-node-exporter

 

 ➜  echo ">>>monitoring NS<<<"; kubectl get ep -n monitoring; \ echo ">>>kube-system NS<<<"; kubectl get ep -n kube-system; \ echo ">>>default NS<<<"; kubectl get ep

 

 ➜  kubectl exec -it -n monitoring sts/prometheus-kube-prometheus-stack-prometheus -- cat /etc/prometheus/config_out/prometheus.env.yaml | head

 

 ➜  helm repo add bitnami https://charts.bitnami.com/bitnami

 ➜  helm repo update 

 

 ➜  yum install -y httpd

 ➜  ab -c 500 -n 30000 https://nginx.song-73.click

 

 


** 지우기 **

eksctl delete cluster --name $CLUSTER_NAME \ && aws cloudformation delete-stack --stack-name $CLUSTER_NAME

 

  

'AWS' 카테고리의 다른 글

[ 12 ] - karpenter 배포  (0) 2024.10.07
[ 11 ] - AWS EKS - Autoscaling  (0) 2024.10.04
[ 9 ] - 모니터링  (0) 2024.09.30
[ 8 ] - External DNS  (0) 2024.09.27
[ 7 ] - EKS Storage Monitoring  (0) 2024.09.26