[TOC]

快速搭建 grafana 可视化平台

项目地址: https://github.com/grafana/grafana/
官方地址: https://grafana.com

安装部署

步骤 01.资源清单（granana.ini）与 （Deployment）部署资源清单。

tee grafana.ini <<'EOF'
[server]
domain = devops.weiyigeek.top
root_url = %(protocol)s://%(domain)s:%(http_port)s/grafana/
serve_from_sub_path = true
EOF

tee grafana-deploy.yaml <<'EOF'
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: grafana-pvc
  namespace: dashboard
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 2Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: grafana
  name: grafana
  namespace: dashboard
spec:
  selector:
    matchLabels:
      app: grafana
  template:
    metadata:
      labels:
        app: grafana
    spec:
      securityContext:
        fsGroup: 472
        supplementalGroups:
          - 0
      containers:
        - name: grafana
          image: grafana/grafana:9.0.2
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 3000
              name: http-grafana
              protocol: TCP
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /robots.txt
              port: 3000
              scheme: HTTP
            initialDelaySeconds: 10
            periodSeconds: 30
            successThreshold: 1
            timeoutSeconds: 2
          livenessProbe:
            failureThreshold: 3
            initialDelaySeconds: 30
            periodSeconds: 10
            successThreshold: 1

            tcpSocket:
              port: 3000
            timeoutSeconds: 1
          resources:
            requests:
              cpu: 512m
              memory: 1024Mi
          volumeMounts:
            - mountPath: /var/lib/grafana
              name: grafana-pv
            - mountPath: /etc/grafana/grafana.ini
              name: ge-config
              subPath: grafana.ini
      volumes:
        - name: grafana-pv
          persistentVolumeClaim:
            claimName: grafana-pvc
        - name: ge-config
          configMap:
            name: ge-config
            items:
            - key: grafana.ini
              path: grafana.ini
---
apiVersion: v1
kind: Service
metadata:
  name: grafana
  namespace: dashboard
spec:
  ports:
    - port: 3000
      protocol: TCP
      targetPort: http-grafana
  selector:
    app: grafana
  sessionAffinity: None
  type: LoadBalancer
EOF

步骤 02.创建 grafana.ini 的 configmap 以及部署 grafana 到集群中

kubectl create configmap ge-config --from-file=grafana.ini --namespace dashboard
kubectl create -f grafana-deploy.yaml --namespace dashboard

步骤 03.部署情况与日志情况查看。

kubectl logs -f --tail 50 -n dashboard -l app=grafana
  # 关键日志:
  # logger=http.server t=2022-07-14T07:24:25.409774065Z level=info msg="HTTP Server Listen" address=[::]:3000 protocol=http subUrl=/grafana socket=

步骤 04.配置 grafana ingress 的资源清单我们便可通过域名+grafana目录的方式进行访问。

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    ingressclass.kubernetes.io/is-default-class: "true"
    nginx.ingress.kubernetes.io/client-body-buffer-size: 50m
    nginx.ingress.kubernetes.io/proxy-body-size: 50m
    nginx.ingress.kubernetes.io/proxy-buffer-size: 50m
    nginx.ingress.kubernetes.io/proxy-buffering: "on"
    nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
    nginx.ingress.kubernetes.io/proxy-connect-timeout: 60s
    nginx.ingress.kubernetes.io/proxy-read-timeout: 120s
    nginx.ingress.kubernetes.io/proxy-send-timeout: 120s
    nginx.ingress.kubernetes.io/rewrite-target: /$2
  labels:
    app: devops
    ref: devops
    url: devops.weiyigeek.top
  name: devops-weiyigeek
  namespace: dashboard
spec:
  ingressClassName: nginx
  rules:
  - host: devops.weiyigeek.top
    http:
      paths:
      - backend:
          service:
            name: grafana
            port:
              number: 3000
        path: /grafana(/|$)(.*)
        pathType: ImplementationSpecific
  tls:
  - hosts:
    - devops.weiyigeek.top
    secretName: weiyigeek.top

温馨提示: 在进行前面操作完毕后我们便可通过https://devops.weiyigeek.top/grafana/login域名地址进行访问，默认密码 admin。

weiyigeek.top-Grafana之serve_from_sub_path设置

快速搭建 vsftpd 服务

描述: 使用K8S快速搭建vsftpd服务，一键部署测试环境，此处使用的是[fauria/vsftpd][https://hub.docker.com/r/fauria/vsftpd]镜像基于Centos 7的vsftpd Docker镜像，支持被动模式和虚拟用户。

此Docker容器实现了一个vsftpd服务器，具有以下特性：

Centos 7基础图像。
vsftpd 3.0版本
支持虚拟用户
支持被动模式(Passive mode)
记录到文件或STDOUT。

资源清单:

tee deploy-vsftpd.yaml <<'EOF'
# ftp-pvc.yaml
# storageClassName 存储按自己环境修改，此次使用 nfs-local，你可以通过如下命令查看
# kubectl get storageclasses.storage.k8s.io 
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: vsftpd-pvc
  namespace: default
spec:
  storageClassName: nfs-local
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 10Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vsftpd
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vsftpd
  template:
    metadata:
      labels:
        app: vsftpd
    spec:
      # 将创建的的PVC绑定到ftp-pv-storage
      volumes:
      - name: ftp-pv-storage
        persistentVolumeClaim:
          claimName: vsftpd-pvc
      containers:
      - name: ftp-container
        image: fauria/vsftpd
        # 除21端口外 此处的端口要与下方设置的被动模式最大端口和最小端口匹配，例如设置随机端口范围为 31110-31115。因为此处容器内的随机端口要与映射后的一致，所以设置为30000以上，在k8s设置端口范围内
        ports:
        - containerPort: 31110
          protocol: TCP
        - containerPort: 31111
          protocol: TCP
        - containerPort: 31112
          protocol: TCP
        - containerPort: 31113
          protocol: TCP
        - containerPort: 31114
          protocol: TCP
        - containerPort: 31115
          protocol: TCP
        - containerPort: 21
          protocol: TCP
        volumeMounts:
        - mountPath: "/home/vsftpd"
          name: ftp-pv-storage
        env:
        - name: FTP_USER
          value: "weiyigeek"
        - name: FTP_PASS
          value: "password"
          # 随机最大端口与最小端口，要与上面设置的匹配
        - name: PASV_MIN_PORT
          value: "31110"
        - name: PASV_MAX_PORT
          value: "31115"
        - name: PASV_ENABLE
          value: "yes"
          # 服务器传回的IP地址，一般为对外公网地址，即客户端连接ftp所用的地址。
        - name: PASV_ADDRESS
          value: "10.20.176.215"
        #- name: PASV_ADDRESS
        #  valueFrom:
        #    fieldRef:
        #      fieldPath: status.hostIP
---
# ftp-service.yaml
apiVersion: v1
kind: Service
metadata:
  name: vsftpd-service
  labels:
    app: vsftpd-service
  namespace: default
spec:
  type: NodePort
  # 除21端口映射外，其他端口需保持一致
  ports:
    - name: ftp-21
      nodePort: 30021
      port: 21
    - name: ftp-31110
      nodePort: 31110
      port: 31110
    - name: ftp-31111
      nodePort: 31111
      port: 31111
    - name: ftp-31112
      nodePort: 31112
      port: 31112
    - name: ftp-31113
      nodePort: 31113
      port: 31113
    - name: ftp-31114
      nodePort: 31114
      port: 31114
    - name: ftp-31115
      nodePort: 31115
      port: 31115
  selector:
    app: vsftpd
EOF
kubectl apply -f deploy-vsftpd.yaml
kubectl get deploy,svc,pod,pvc