1.2. Logging 6.0

流程

1. 从 OperatorHub 安装 OpenShift Logging 和 Loki Operator。

2. 在 openshift-logging 命名空间中创建 LokiStack 自定义资源(CR)：

   apiVersion: loki.grafana.com/v1
   kind: LokiStack
   metadata:
     name: logging-loki
     namespace: openshift-logging
   spec:
     managementState: Managed
     size: 1x.extra-small
     storage:
       schemas:
       - effectiveDate: '2022-06-01'
         version: v13
       secret:
         name: logging-loki-s3
         type: s3
       storageClassName: gp3-csi
     tenants:
       mode: openshift-logging

   Copy to Clipboard Toggle word wrap

3. 为收集器创建服务帐户：

   $ oc create sa collector -n openshift-logging

   Copy to Clipboard Toggle word wrap

4. 为收集器创建 ClusterRole ：

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRole
   metadata:
     name: logging-collector-logs-writer
   rules:
   - apiGroups:
     - loki.grafana.com
     resourceNames:
     - logs
     resources:
     - application
     - audit
     - infrastructure
     verbs:
     - create

   Copy to Clipboard Toggle word wrap

5. 将 ClusterRole 绑定到服务帐户：

   $ oc adm policy add-cluster-role-to-user logging-collector-logs-writer -z collector

   Copy to Clipboard Toggle word wrap
6. 安装 Cluster Observability Operator。

7. 创建一个 UIPlugin 以启用 Observe 选项卡中的 Log 部分：

   apiVersion: observability.openshift.io/v1alpha1
   kind: UIPlugin
   metadata:
     name: logging
   spec:
     type: Logging
     logging:
       lokiStack:
         name: logging-loki

   Copy to Clipboard Toggle word wrap

8. 在 collector 服务帐户中添加额外的角色：

   $ oc project openshift-logging
   $ oc adm policy add-cluster-role-to-user collect-application-logs -z collector
   $ oc adm policy add-cluster-role-to-user collect-audit-logs -z collector
   $ oc adm policy add-cluster-role-to-user collect-infrastructure-logs -z collector

   Copy to Clipboard Toggle word wrap

9. 创建一个 ClusterLogForwarder CR 来配置日志转发：

   apiVersion: observability.openshift.io/v1
   kind: ClusterLogForwarder
   metadata:
     name: collector
     namespace: openshift-logging
   spec:
     serviceAccount:
       name: collector
     outputs:
     - name: default-lokistack
       type: lokiStack
       lokiStack:
         target:
           name: logging-loki
           namespace: openshift-logging
         authentication:
           token:
             from: serviceAccount
       tls:
         ca:
           key: service-ca.crt
           configMapName: openshift-service-ca.crt
     pipelines:
     - name: default-logstore
       inputRefs:
       - application
       - infrastructure
       outputRefs:
       - default-lokistack

   Copy to Clipboard Toggle word wrap
10. 验证日志是否在 OpenShift Web 控制台的 Observe 选项卡的 Log 部分可见。