读书网站建设策划书摘要如何做网站新手个人教程

前言：
使用top命令查看需k8s使用资源信息，需要安装Metrics-Server 插件。
注意：这个kube-state-metrics是不一样的。

1. Metrics Server 插件

参考文档：https://github.com/kubernetes-sigs/metrics-server
注意：官网有坑不要按上边的来

1.1 编排文件

• 下载地址:
  https://github.com/kubernetes-sigs/metrics-server/releases

选择合适的版本下载

• 镜像准备

默认的 k8s.gcr.io的镜像下载不了，我们选择科学上网或下载阿里云镜像

registry.aliyuncs.com/google_containers/metrics-server-amd64:v0.3.6

• 修改yaml文件

修改如下三处

• 添加command（必要）
• 添加limit（非必要）
• 修改镜像（非必要）

components.yaml 文件修改如下：

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:name: system:aggregated-metrics-readerlabels:rbac.authorization.k8s.io/aggregate-to-view: "true"rbac.authorization.k8s.io/aggregate-to-edit: "true"rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:
- apiGroups: ["metrics.k8s.io"]resources: ["pods", "nodes"]verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: metrics-server:system:auth-delegator
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: system:auth-delegator
subjects:
- kind: ServiceAccountname: metrics-servernamespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:name: metrics-server-auth-readernamespace: kube-system
roleRef:apiGroup: rbac.authorization.k8s.iokind: Rolename: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccountname: metrics-servernamespace: kube-system
---
apiVersion: apiregistration.k8s.io/v1beta1
kind: APIService
metadata:name: v1beta1.metrics.k8s.io
spec:service:name: metrics-servernamespace: kube-systemgroup: metrics.k8s.ioversion: v1beta1insecureSkipTLSVerify: truegroupPriorityMinimum: 100versionPriority: 100
---
apiVersion: v1
kind: ServiceAccount
metadata:name: metrics-servernamespace: kube-system
---
apiVersion: apps/v1
kind: Deployment
metadata:name: metrics-servernamespace: kube-systemlabels:k8s-app: metrics-server
spec:selector:matchLabels:k8s-app: metrics-servertemplate:metadata:name: metrics-serverlabels:k8s-app: metrics-serverspec:serviceAccountName: metrics-servervolumes:# mount in tmp so we can safely use from-scratch images and/or read-only containers- name: tmp-diremptyDir: {}containers:- name: metrics-server#image: k8s.gcr.io/metrics-server-amd64:v0.3.6image: registry.aliyuncs.com/google_containers/metrics-server-amd64:v0.3.6imagePullPolicy: IfNotPresentargs:- --cert-dir=/tmp- --secure-port=4443command:- /metrics-server- --kubelet-insecure-tls- --kubelet-preferred-address-types=InternalDNS,InternalIP,ExternalDNS,ExternalIP,Hostnameports:- name: main-portcontainerPort: 4443protocol: TCPsecurityContext:readOnlyRootFilesystem: truerunAsNonRoot: truerunAsUser: 1000volumeMounts:- name: tmp-dirmountPath: /tmpresources:limits:cpu: 300mmemory: 200Mirequests:cpu: 200mmemory: 100MinodeSelector:kubernetes.io/os: linuxkubernetes.io/arch: "amd64"
---
apiVersion: v1
kind: Service
metadata:name: metrics-servernamespace: kube-systemlabels:kubernetes.io/name: "Metrics-server"kubernetes.io/cluster-service: "true"
spec:selector:k8s-app: metrics-serverports:- port: 443protocol: TCPtargetPort: main-port
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:name: system:metrics-server
rules:
- apiGroups:- ""resources:- pods- nodes- nodes/stats- namespaces- configmapsverbs:- get- list- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: system:metrics-server
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: system:metrics-server
subjects:
- kind: ServiceAccountname: metrics-servernamespace: kube-system

1.2 安装

• 安装

kubectl create -f ./components.yaml

• 查看

pod/metrics-server-6cbcc95697-xckv6       1/1     Running   0          6h26mservice/metrics-server       ClusterIP   10.1.113.17   <none>        443/TCP                  6h26mdeployment.apps/metrics-server       1/1     1            1           6h26mreplicaset.apps/metrics-server-6cbcc95697       1         1         1       6h26m

对比一下我们这钱安装的kube-state-metrics

[root@IoT-M01 yml]# kubectl get all -n kube-system |grep metrics
pod/kube-state-metrics-6497487656-4p9w6   1/1     Running   1          13d
pod/metrics-server-6cbcc95697-xckv6       1/1     Running   0          13mservice/kube-state-metrics   ClusterIP   None          <none>        8080/TCP,8081/TCP        13d
service/metrics-server       ClusterIP   10.1.113.17   <none>        443/TCP                  13mdeployment.apps/kube-state-metrics   1/1     1            1           13ddeployment.apps/metrics-server       1/1     1            1           13m
replicaset.apps/kube-state-metrics-6497487656   1         1         1       13d
replicaset.apps/kube-state-metrics-74b87488f    0         0         0       13dreplicaset.apps/metrics-server-6cbcc95697       1         1         1       13m

可以看到，之前监控启动的kube-state-metrics和本次安装的metrics-server并不是一套服务 。
一个使用了8080端口，一个使用了安全端口443。
虽然镜像不一样，但都是收集k8s资源信息的，不知道是不是用一个就可以，没有测试。

2.top命令使用示例

2.1 查看pod资源

[root@devops-master ~]# kubectl top pod -n iot-test-03
NAME                             CPU(cores)   MEMORY(bytes)
apigw-iot-85584cf578-ffr9d       1m           35Mi
apigw-iot-85584cf578-j5bg9       1m           43Mi
apigw-iot-85584cf578-vs4f6       1m           45Mi
emqx-iot-0                       2m           173Mi
emqx-iot-1                       3m           143Mi
emqx-iot-2                       3m           139Mi
monitor-iot-67857b5d65-5gwxd     1m           40Mi
monitor-iot-67857b5d65-p2gjx     1m           47Mi
monitor-iot-67857b5d65-vgl92     1m           33Mi
msgroute-iot-6c4d676c5d-6n6jp    1m           11Mi
msgroute-iot-6c4d676c5d-7grgx    1m           17Mi
msgroute-iot-6c4d676c5d-q4k87    1m           14Mi
mysql-iot-8dflr                  1m           251Mi
redis-iot-58498b5dc8-j5w8g       2m           13Mi
remotectl-iot-74d59ff47-6r9fd    1m           23Mi
remotectl-iot-74d59ff47-r42gn    1m           27Mi
remotectl-iot-74d59ff47-s2c7k    1m           33Mi
remoteops-iot-679465fd48-kn2l8   1m           28Mi
remoteops-iot-679465fd48-sz8nx   1m           16Mi
remoteops-iot-679465fd48-vsj8v   1m           23Mi
web-iot-ffc9b5fff-4ls9k          0m           9Mi
web-iot-ffc9b5fff-5d457          0m           10Mi
web-iot-ffc9b5fff-g54rx          0m           5Mi

2.2 查看node资源

NAME             CPU(cores)   CPU%   MEMORY(bytes)   MEMORY%
b9-node02        118m         5%     1205Mi          32%
b9-node3         80m          2%     2321Mi          14%
devopsnode01     186m         2%     6569Mi          41%
es-node32cuogf   325m         2%     6866Mi          21%
master01         244m         3%     17915Mi         56%

2.3 简单的监控页面

注意：此处仅是一个示例，不具有生产意义，真实场景还是要接正经监控的

• 写一个脚本将将数据写入nginx页面

#!/bin/bash
for ((i=0;i<=58;i++))
dokubectl top -n $1 pod > /usr/local/nginx/build/$1.txtecho "----------date-------------" >> /usr/local/nginx/build/$1.txtdate "+%Y-%m-%d %H:%M:%S" >>  /usr/local/nginx/build/$1.txtsleep 1
done

• 设置定时任务

*   *   *  *  *  bash /usr/local/script/nginx/kube-top.sh crust-framework

• 查看结果
  

---