k8s與UI--scope簡介與部署

Anleb 發(fā)布于2019-07-01 17:27 / 2028人閱讀

摘要：簡介是公司開源的用于監(jiān)控，可視化，管理集群的一個類似于的系統(tǒng)。另外一個是插件，該插件用來控制容器的流量。在官方不支持流控之前，也是一個不侵入的選擇。由于沒有提供登錄認證的功能。通過將暴露，內(nèi)網(wǎng)可以訪問。

scope簡介

scope 是 weave公司開源的用于監(jiān)控，可視化，管理kubernetes集群的一個類似于dashbord的UI系統(tǒng)。有一下四大特點：

實時了解你的docker容器。

相關(guān)細節(jié)和深層鏈接。提供了容器tags，元數(shù)據(jù)，metrics等細節(jié)，也提供了cpu和內(nèi)存指標(biāo)。

集成了容器管理?？梢詐ause，stop容器，也提供了webshell，方便對容器進行操作。

插件機制。這個很重要，可以根據(jù)約定，寫一些自己需要的插件。官方提供的插件集中在github。

個人感覺有兩個地方做的不錯。第一個是scope提供了容器之間的業(yè)務(wù)拓撲，可以很方便的查看調(diào)用關(guān)系。

另外一個是scope-traffic-control插件，該插件用來控制容器的流量。
本身k8s只提供了cpu，內(nèi)存和存儲的限制。在官方不支持流控之前，也是一個不侵入的選擇。利用的原理就是linux tc。后期我們會對該插件專門介紹。

scope部署

直接上yaml文件

apiVersion: v1
kind: List
items:
  - apiVersion: v1
    kind: Namespace
    metadata:
      name: weave
      annotations:
        cloud.weave.works/version: v1.0.0-44-gd0d2369
  - apiVersion: v1
    kind: ServiceAccount
    metadata:
      name: weave-scope
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope
      namespace: weave
  - apiVersion: rbac.authorization.k8s.io/v1beta1
    kind: ClusterRole
    metadata:
      name: weave-scope
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope
      namespace: weave
    rules:
      - apiGroups:
          - "*"
        resources:
          - "*"
        verbs:
          - "*"
      - nonResourceURLs:
          - "*"
        verbs:
          - "*"
  - apiVersion: rbac.authorization.k8s.io/v1beta1
    kind: ClusterRoleBinding
    metadata:
      name: weave-scope
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope
      namespace: weave
    roleRef:
      kind: ClusterRole
      name: weave-scope
      apiGroup: rbac.authorization.k8s.io
    subjects:
      - kind: ServiceAccount
        name: weave-scope
        namespace: weave
  - apiVersion: apps/v1beta1
    kind: Deployment
    metadata:
      name: weave-scope-app
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope-app
        app: weave-scope
        weave-cloud-component: scope
        weave-scope-component: app
      namespace: weave
    spec:
      replicas: 1
      revisionHistoryLimit: 2
      template:
        metadata:
          labels:
            name: weave-scope-app
            app: weave-scope
            weave-cloud-component: scope
            weave-scope-component: app
        spec:
          containers:
            - name: app
              args:
                - "--no-probe"
                - "--weave=false"
              env: []
              image: "registry.xxx.com/kubernetes/scope:1.7.3"
              imagePullPolicy: IfNotPresent
              ports:
                - containerPort: 4040
                  protocol: TCP
  - apiVersion: v1
    kind: Service
    metadata:
      name: weave-scope-app
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope-app
        app: weave-scope
        weave-cloud-component: scope
        weave-scope-component: app
      namespace: weave
    spec:
      type: NodePort 
      ports:
        - name: app
          port: 80
          protocol: TCP
          targetPort: 4040
          nodePort: 32404
      selector:
        name: weave-scope-app
        app: weave-scope
        weave-cloud-component: scope
        weave-scope-component: app
  - apiVersion: extensions/v1beta1
    kind: DaemonSet
    metadata:
      name: weave-scope-agent
      annotations:
        cloud.weave.works/launcher-info: |-
          {
            "original-request": {
              "url": "/k8s/scope.yaml?k8s-version=1.8.0",
              "date": "Sat Feb 24 2018 09:12:44 GMT+0000 (UTC)"
            },
            "email-address": "[email protected]"
          }
      labels:
        name: weave-scope-agent
        app: weave-scope
        weave-cloud-component: scope
        weave-scope-component: agent
      namespace: weave
    spec:
      template:
        metadata:
          labels:
            name: weave-scope-agent
            app: weave-scope
            weave-cloud-component: scope
            weave-scope-component: agent
        spec:
          containers:
            - name: scope-agent
              args:
                - "--no-app"
                - "--probe.docker.bridge=docker0"
                - "--probe.docker=true"
                - "--probe.kubernetes=true"
                - "weave-scope-app.weave:80"
                - "--weave=false"
              env:
                - name: KUBERNETES_HOSTNAME
                  valueFrom:
                    fieldRef:
                      apiVersion: v1
                      fieldPath: spec.nodeName
              image: "registry.xxx.com/kubernetes/scope:1.7.3"
              imagePullPolicy: IfNotPresent
              securityContext:
                privileged: true
              volumeMounts:
                - name: docker-socket
                  mountPath: /var/run/docker.sock
                - name: scope-plugins
                  mountPath: /var/run/scope/plugins
                - name: sys-kernel-debug
                  mountPath: /sys/kernel/debug
          dnsPolicy: ClusterFirstWithHostNet
          hostNetwork: true
          hostPID: true
          serviceAccountName: weave-scope
          tolerations:
            - effect: NoSchedule
              operator: Exists
          volumes:
            - name: docker-socket
              hostPath:
                path: /var/run/docker.sock
            - name: scope-plugins
              hostPath:
                path: /var/run/scope/plugins
            - name: sys-kernel-debug
              hostPath:
                path: /sys/kernel/debug
      updateStrategy:
        type: RollingUpdate

將鏡像源修改為自己服務(wù)器可以pull到即可。

由于scope沒有提供登錄認證的功能。所以沒有通過ingress映射到外網(wǎng)。通過nodeport將service暴露，內(nèi)網(wǎng)可以訪問。當(dāng)然可以輕松改造，整個接口采用mux實現(xiàn)，實現(xiàn)一個自己的認證中間件即可，這就是后續(xù)工作了。

如果你的k8s版本不是1.8.0，那么你可以獲取yaml文件通過下面語句

curl https://cloud.weave.works/k8s/scope.yaml?k8s-version=1.6.7 -sL -o scope.yaml

最后上一張效果圖

總結(jié)

當(dāng)然如果是一個商用的k8s集群，scope遠遠不夠。但是對于內(nèi)部使用，scope是dashbord的一種很好的補充，也可以擴展，來滿足自己。

GPU云服務(wù)器云服務(wù)器私有云與本地部署的區(qū)別部署優(yōu)與云服務(wù)器企業(yè)云服務(wù)器選型與部署過程分享華為sd-wan解決方案設(shè)計與部署

文章版權(quán)歸作者所有，未經(jīng)允許請勿轉(zhuǎn)載,若此文章存在違規(guī)行為，您可以聯(lián)系管理員刪除。

轉(zhuǎn)載請注明本文地址：http://systransis.cn/yun/33030.html

發(fā)表評論

登陸后可評論

0條評論

Anleb

男|高級講師

我要關(guān)注我要私信

TA的文章

Linux系統(tǒng)賬號安全和登錄控制（一切為了安全）

閱讀 1167·2021-11-25 09:43
2018.12.23 無障礙學(xué)習(xí)小計

閱讀 2982·2019-08-30 15:54
【學(xué)習(xí)筆記】CSS深入理解之a(chǎn)bsolute

閱讀 3364·2019-08-30 15:54
偽元素的content屬性使用中文字符集可能會出現(xiàn)亂碼情況

閱讀 3017·2019-08-30 15:44
LeetCode 290 單詞模式 JS實現(xiàn)

閱讀 1638·2019-08-26 12:18
JavaScript疑難雜癥系列-事件

閱讀 2268·2019-08-26 11:42
JavaScript作用域

閱讀 888·2019-08-26 11:35
vue中keepAlive的使用

閱讀 3306·2019-08-23 18:22

成人国产在线小视频_日韩寡妇人妻调教在线播放_色成人www永久在线观看_2018国产精品久久_亚洲欧美高清在线30p_亚洲少妇综合一区_黄色在线播放国产_亚洲另类技巧小说校园_国产主播xx日韩_a级毛片在线免费

資訊專欄INFORMATION COLUMN

上云采購季！| 2核2G4M爆款云服務(wù)器低至59元/年，更有多臺、長期優(yōu)惠，快來選購！

k8s與UI--scope簡介與部署

相關(guān)文章