|NO.Z.00339|——————————|CloudNative|——|KuberNetes&运维.V56|——|Prometheus.v01|自动发现.v01|创建secret|

一、自动发现配置：创建secret

### --- 配置Prometheus-additional.yaml配置文件
~~~     创建prometheus-additional配置文件

[root@k8s-master01 discovery]# cat prometheus-additional.yaml 
- job_name: 'blackbox'
  metrics_path: /probe
  params:
    module: [http_2xx]  # Look for a HTTP 200 response.
  static_configs:
    - targets:
      - https://www.baidu.com/
  relabel_configs:
    - source_labels: [__address__]
      target_label: __param_target
    - source_labels: [__param_target]
      target_label: instance
    - source_labels: [instance]
      target_label: target
    - target_label: __address__
      replacement: blackbox-exporter:9115  # The blackbox exporter's real hostname:port.
    - job_name: 'auto_discovery'
      metrics_path: /probe
      params:
        module: [http_2xx]  
      kubernetes_sd_configs:
      - role: ingress
      relabel_configs:
      - source_labels: [__meta_kubernetes_ingress_annotation_prometheus_io_http_probe]
        action: keep
        regex: true
      - source_labels: [__meta_kubernetes_ingress_scheme,__address__,__meta_kubernetes_ingress_path]
        regex: (.+);(.+);(.+)
        replacement: ${1}://${2}${3}
        target_label: __param_target
      - source_labels: [__meta_kubernetes_ingress_scheme,__address__,__meta_kubernetes_ingress_path]
        regex: (.+);(.+);(.+)
        replacement: ${1}://${2}${3}
        target_label: target
      - target_label: __address__
        replacement: blackbox-exporter:9115
      - source_labels: [__param_target]
        target_label: instance
      - action: labelmap
        regex: __meta_kubernetes_ingress_label_(.+)
      - source_labels: [__meta_kubernetes_namespace]
        target_label: kubernetes_namespace
      - source_labels: [__meta_kubernetes_ingress_name]
        target_label: kubernetes_name

二、Prometheus-additional文件详解

### --- prometheus-additional配置文件详解

[root@k8s-master01 discovery]# cat prometheus-additional.yaml 
- job_name: 'auto_discovery'      # 定义了一个auto_discovery
  metrics_path: /probe
  params:
    module: [http_2xx]  
  kubernetes_sd_configs:          # 使用的是k8s的服务发现
  - role: ingress                 # 服务发现是就ingress，也可以基于pod，service，都是可以的
  relabel_configs:                # 匹配规则：
  - source_labels: [__meta_kubernetes_ingress_annotation_prometheus_io_http_probe]
    action: keep                  # keep符合这个规则就是进行收集；还有Job，就是符合这个规则就是把它踢出去
    regex: true                     
  - source_labels: [__meta_kubernetes_ingress_scheme,__address__,__meta_kubernetes_ingress_path]    # 定义的target，address：ingress的地址：meta_kubernetes_ingress_path：就是ingress的后面URL地址部分
    regex: (.+);(.+);(.+)         # 取到的值以分号进行分隔，定义了一个正则表达式
    replacement: ${1}://${2}${3}  # 会在一块就是显示的是一个完整的域名形式
    target_label: __param_target
  - source_labels: [__meta_kubernetes_ingress_scheme,__address__,__meta_kubernetes_ingress_path]
    regex: (.+);(.+);(.+)
    replacement: ${1}://${2}${3}
    target_label: target
  - target_label: __address__      # 把黑盒监控的地址赋值给address，就可以请求了
    replacement: blackbox-exporter:9115         
  - source_labels: [__param_target]
    target_label: instance         # 定义了一个instance的值
  - action: labelmap               # 定义了一个label
    regex: __meta_kubernetes_ingress_label_(.+)
  - source_labels: [__meta_kubernetes_namespace]
    target_label: kubernetes_namespace
  - source_labels: [__meta_kubernetes_ingress_name]
    target_label: kubernetes_name

三、创建secrets配置文件，通过additional文件生成

### --- 生成secrets配置文件：通过additional文件来生成

[root@k8s-master01 discovery]#  kubectl create secret generic additional-scrape-configs --from-file=prometheus-additional.yaml --dry-run -oyaml > additional-scrape-configs.yaml
W0529 14:56:23.198084    4376 helpers.go:553] --dry-run is deprecated and can be replaced with --dry-run=client.

### --- 查看secrets配置文件

[root@k8s-master01 discovery]# cat additional-scrape-configs.yaml 
apiVersion: v1
data:
  prometheus-additional.yaml: LSBqb2JfbmFtZTogJ2JsYWNrYm94JwogIG1ldHJpY3NfcGF0aDogL3Byb2JlCiAgcGFyYW1zOgogICAgbW9kdWxlOiBbaHR0cF8yeHhdICAjIExvb2sgZm9yIGEgSFRUUCAyMDAgcmVzcG9uc2UuCiAgc3RhdGljX2NvbmZpZ3M6CiAgICAtIHRhcmdldHM6CiAgICAgIC0gaHR0cHM6Ly93d3cuYmFpZHUuY29tLwogIHJlbGFiZWxfY29uZmlnczoKICAgIC0gc291cmNlX2xhYmVsczogW19fYWRkcmVzc19fXQogICAgICB0YXJnZXRfbGFiZWw6IF9fcGFyYW1fdGFyZ2V0CiAgICAtIHNvdXJjZV9sYWJlbHM6IFtfX3BhcmFtX3RhcmdldF0KICAgICAgdGFyZ2V0X2xhYmVsOiBpbnN0YW5jZQogICAgLSBzb3VyY2VfbGFiZWxzOiBbaW5zdGFuY2VdCiAgICAgIHRhcmdldF9sYWJlbDogdGFyZ2V0CiAgICAtIHRhcmdldF9sYWJlbDogX19hZGRyZXNzX18KICAgICAgcmVwbGFjZW1lbnQ6IGJsYWNrYm94LWV4cG9ydGVyOjkxMTUgICMgVGhlIGJsYWNrYm94IGV4cG9ydGVyJ3MgcmVhbCBob3N0bmFtZTpwb3J0LgogICAgLSBqb2JfbmFtZTogJ2F1dG9fZGlzY292ZXJ5JwogICAgICBtZXRyaWNzX3BhdGg6IC9wcm9iZQogICAgICBwYXJhbXM6CiAgICAgICAgbW9kdWxlOiBbaHR0cF8yeHhdICAKICAgICAga3ViZXJuZXRlc19zZF9jb25maWdzOgogICAgICAtIHJvbGU6IGluZ3Jlc3MKICAgICAgcmVsYWJlbF9jb25maWdzOgogICAgICAtIHNvdXJjZV9sYWJlbHM6IFtfX21ldGFfa3ViZXJuZXRlc19pbmdyZXNzX2Fubm90YXRpb25fcHJvbWV0aGV1c19pb19odHRwX3Byb2JlXQogICAgICAgIGFjdGlvbjoga2VlcAogICAgICAgIHJlZ2V4OiB0cnVlCiAgICAgIC0gc291cmNlX2xhYmVsczogW19fbWV0YV9rdWJlcm5ldGVzX2luZ3Jlc3Nfc2NoZW1lLF9fYWRkcmVzc19fLF9fbWV0YV9rdWJlcm5ldGVzX2luZ3Jlc3NfcGF0aF0KICAgICAgICByZWdleDogKC4rKTsoLispOyguKykKICAgICAgICByZXBsYWNlbWVudDogJHsxfTovLyR7Mn0kezN9CiAgICAgICAgdGFyZ2V0X2xhYmVsOiBfX3BhcmFtX3RhcmdldAogICAgICAtIHNvdXJjZV9sYWJlbHM6IFtfX21ldGFfa3ViZXJuZXRlc19pbmdyZXNzX3NjaGVtZSxfX2FkZHJlc3NfXyxfX21ldGFfa3ViZXJuZXRlc19pbmdyZXNzX3BhdGhdCiAgICAgICAgcmVnZXg6ICguKyk7KC4rKTsoLispCiAgICAgICAgcmVwbGFjZW1lbnQ6ICR7MX06Ly8kezJ9JHszfQogICAgICAgIHRhcmdldF9sYWJlbDogdGFyZ2V0CiAgICAgIC0gdGFyZ2V0X2xhYmVsOiBfX2FkZHJlc3NfXwogICAgICAgIHJlcGxhY2VtZW50OiBibGFja2JveC1leHBvcnRlcjo5MTE1CiAgICAgIC0gc291cmNlX2xhYmVsczogW19fcGFyYW1fdGFyZ2V0XQogICAgICAgIHRhcmdldF9sYWJlbDogaW5zdGFuY2UKICAgICAgLSBhY3Rpb246IGxhYmVsbWFwCiAgICAgICAgcmVnZXg6IF9fbWV0YV9rdWJlcm5ldGVzX2luZ3Jlc3NfbGFiZWxfKC4rKQogICAgICAtIHNvdXJjZV9sYWJlbHM6IFtfX21ldGFfa3ViZXJuZXRlc19uYW1lc3BhY2VdCiAgICAgICAgdGFyZ2V0X2xhYmVsOiBrdWJlcm5ldGVzX25hbWVzcGFjZQogICAgICAtIHNvdXJjZV9sYWJlbHM6IFtfX21ldGFfa3ViZXJuZXRlc19pbmdyZXNzX25hbWVdCiAgICAgICAgdGFyZ2V0X2xhYmVsOiBrdWJlcm5ldGVzX25hbWUK
kind: Secret
metadata:
  creationTimestamp: null
  name: additional-scrape-configs

四、生成创建secrets

### --- 创建secrets

[root@k8s-master01 additional]# kubectl create -f additional-scrape-configs.yaml -n monitoring
secret/additional-scrape-configs created

### --- 查看创建的secrets

[root@k8s-master01 discovery]# kubectl get secrets -n monitoring
NAME                                       TYPE                                  DATA   AGE
additional-scrape-configs-ratel-secret-1   Opaque                                1      43m

---

 

 

 

 

 

 

 

 

 

---

Walter Savage Landor:strove with none,for none was worth my strife.Nature I loved and, next to Nature, Art:I warm'd both hands before the fire of life.It sinks, and I am ready to depart

                                                                                                                                                   ——W.S.Landor

---