0
点赞
收藏
分享

微信扫一扫

【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】


概述

Metrics Server

  • 一个集群范围的资源使用情况的数据聚合器。作为一个应用部署在集群中。
  • Metric server从每个节点上Kubelet API收集指标,通过Kubernetes聚合器注册在Master APIServer中。

开源地址

  • Github:​​https://github.com/kubernetes-sigs/metrics-server​​
  • K8s说明:​​https://kubernetes.io/zh-cn/docs/tasks/debug/debug-cluster/resource-metrics-pipeline/​​

安装

镜像

metrics-server:v0.6.1

  • 国内可能拉取不到这个镜像,这不我已经把这个镜像包上传到我个人的阿里云上面的开放仓库上面,大家可以pull下来自己进行tag。

docker pull registry.cn-chengdu.aliyuncs.com/rundreams-open/metrics-server:v0.6.1

yaml 配置

  • 官方yaml下载

wget https://github.com/kubernetes-sigs/metrics-server/releases/download/v0.6.1/components.yaml

  • 下载下来的yaml需要对某些地方进行修改

- --kubelet-insecure-tls #不验证kubelet提供的 https 证书
- --kubelet-preferred-address-types=InternalIP #使用节点IP连接 kubelet

  • 推荐使用博主的yaml

apiVersion: v1
kind: ServiceAccount
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
k8s-app: metrics-server
rbac.authorization.k8s.io/aggregate-to-admin: "true"
rbac.authorization.k8s.io/aggregate-to-edit: "true"
rbac.authorization.k8s.io/aggregate-to-view: "true"
name: system:aggregated-metrics-reader
rules:
- apiGroups:
- metrics.k8s.io
resources:
- pods
- nodes
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
k8s-app: metrics-server
name: system:metrics-server
rules:
- apiGroups:
- ""
resources:
- nodes/metrics
verbs:
- get
- apiGroups:
- ""
resources:
- pods
- nodes
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
k8s-app: metrics-server
name: metrics-server-auth-reader
namespace: kube-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: extension-apiserver-authentication-reader
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
k8s-app: metrics-server
name: metrics-server:system:auth-delegator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:auth-delegator
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
k8s-app: metrics-server
name: system:metrics-server
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: system:metrics-server
subjects:
- kind: ServiceAccount
name: metrics-server
namespace: kube-system
---
apiVersion: v1
kind: Service
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
spec:
ports:
- name: https
port: 443
protocol: TCP
targetPort: https
selector:
k8s-app: metrics-server
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
k8s-app: metrics-server
name: metrics-server
namespace: kube-system
spec:
selector:
matchLabels:
k8s-app: metrics-server
strategy:
rollingUpdate:
maxUnavailable: 0
template:
metadata:
labels:
k8s-app: metrics-server
spec:
containers:
- args:
- --cert-dir=/tmp
- --secure-port=4443
- --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
- --kubelet-use-node-status-port
- --metric-resolution=15s
- --kubelet-insecure-tls
- --kubelet-preferred-address-types=InternalIP
image: registry.cn-chengdu.aliyuncs.com/rundreams-open/metrics-server:v0.6.1
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /livez
port: https
scheme: HTTPS
periodSeconds: 10
name: metrics-server
ports:
- containerPort: 4443
name: https
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /readyz
port: https
scheme: HTTPS
initialDelaySeconds: 20
periodSeconds: 10
resources:
requests:
cpu: 100m
memory: 200Mi
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
volumeMounts:
- mountPath: /tmp
name: tmp-dir
nodeSelector:
kubernetes.io/os: linux
priorityClassName: system-cluster-critical
serviceAccountName: metrics-server
volumes:
- emptyDir: {}
name: tmp-dir
---
apiVersion: apiregistration.k8s.io/v1
kind: APIService
metadata:
labels:
k8s-app: metrics-server
name: v1beta1.metrics.k8s.io
spec:
group: metrics.k8s.io
groupPriorityMinimum: 100
insecureSkipTLSVerify: true
service:
name: metrics-server
namespace: kube-system
version: v1beta1
versionPriority: 100

  • 执行如下命令

kubectl apply -f components.yaml

【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_docker

使用

节点查看

  • 查看集群资源信息: ​​kubectl top node​
  • 【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_github_02

  • 查看集群某个节点资源信息:​​kubectl top node k8s-node-2​
  • 【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_原力计划_03

  • 查看某个命令空间下所有po的资源:​​kubectl top po -n kube-system​
  • 【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_github_04

  • 查看某个po的资源情况:​​kubectl top pod web-7d49f4cd5c-5rh8b​
  • 【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_docker_05

总结

【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_docker_06


【云原生-K8s】k8s监控集群资源利用率、k8s top【Metrics Server】_kubernetes_07

  • 数据采集流程:kubectl top -> apiserver -> metrics-server -> kubelet(cadvisor)(https)
  • 参考资料:​​https://cloud.tencent.com/developer/article/1645042​​



举报

相关推荐

0 条评论