转发遥测数据

流程

1. 为 OpenTelemetry Collector 创建服务帐户。

   ServiceAccount 示例

   apiVersion: v1
   kind: ServiceAccount
   metadata:
     name: otel-collector-deployment

2. 为服务帐户创建集群角色。

   ClusterRole 示例

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRole
   metadata:
     name: otel-collector
   rules:
   - apiGroups: [""]
     resources: ["pods", "namespaces",]
     verbs: ["get", "watch", "list"] 

   1

   
   - apiGroups: ["apps"]
     resources: ["replicasets"]
     verbs: ["get", "watch", "list"] 

   2

   
   - apiGroups: ["config.openshift.io"]
     resources: ["infrastructures", "infrastructures/status"]
     verbs: ["get", "watch", "list"] 

   3

   1

   本例使用 Kubernetes Attributes Processor，这需要 pod 和 namespaces 资源的这些权限。

   2

   另外，由于 Kubernetes Attributes Processor，replicasets 资源还需要这些权限。

   3

   本例也使用 Resource Detection Processor，对于 infrastructures 和 status 需要这些权限。

3. 将集群角色绑定到服务帐户。

   ClusterRoleBinding 示例

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
     name: otel-collector
   subjects:
   - kind: ServiceAccount
     name: otel-collector-deployment
     namespace: otel-collector-example
   roleRef:
     kind: ClusterRole
     name: otel-collector
     apiGroup: rbac.authorization.k8s.io

4. 创建 YAML 文件以定义 OpenTelemetryCollector 自定义资源(CR)。

   OpenTelemetryCollector 示例

   apiVersion: opentelemetry.io/v1beta1
   kind: OpenTelemetryCollector
   metadata:
     name: otel
   spec:
     mode: deployment
     serviceAccount: otel-collector-deployment
     config:
       receivers:
         jaeger:
           protocols:
             grpc: {}
             thrift_binary: {}
             thrift_compact: {}
             thrift_http: {}
         opencensus: {}
         otlp:
           protocols:
             grpc: {}
             http: {}
         zipkin: {}
       processors:
         batch: {}
         k8sattributes: {}
         memory_limiter:
           check_interval: 1s
           limit_percentage: 50
           spike_limit_percentage: 30
         resourcedetection:
           detectors: [openshift]
       exporters:
         otlp:
           endpoint: "tempo-simplest-distributor:4317" 

   1

   
           tls:
             insecure: true
       service:
         pipelines:
           traces:
             receivers: [jaeger, opencensus, otlp, zipkin] 

   2

   
             processors: [memory_limiter, k8sattributes, resourcedetection, batch]
             exporters: [otlp]

   1

   Collector exporter 配置为导出 OTLP 并指向 Tempo 经销商端点 "tempo-simplest-distributor:4317" （在这个示例中已创建）。

   2

   Collector 配置了 Jaeger trace 的接收器，OpenCensus trace over the OpenCensus 协议, Zipkin trace over the Zipkin protocol, 和 OTLP trace over the gRPC 协议。

流程

1. 为 OpenTelemetry Collector 创建服务帐户。

   ServiceAccount 对象示例

   apiVersion: v1
   kind: ServiceAccount
   metadata:
     name: otel-collector-deployment
     namespace: openshift-logging

2. 创建一个集群角色，为 Collector 的服务帐户授予将日志推送到 LokiStack 应用程序租户的权限。

   ClusterRole 对象示例

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRole
   metadata:
     name: otel-collector-logs-writer
   rules:
    - apiGroups: ["loki.grafana.com"]
      resourceNames: ["logs"]
      resources: ["application"]
      verbs: ["create"]
    - apiGroups: [""]
      resources: ["pods", "namespaces", "nodes"]
      verbs: ["get", "watch", "list"]
    - apiGroups: ["apps"]
      resources: ["replicasets"]
      verbs: ["get", "list", "watch"]
    - apiGroups: ["extensions"]
      resources: ["replicasets"]
      verbs: ["get", "list", "watch"]

3. 将集群角色绑定到服务帐户。

   ClusterRoleBinding 对象示例

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
     name: otel-collector-logs-writer
   roleRef:
     apiGroup: rbac.authorization.k8s.io
     kind: ClusterRole
     name: otel-collector-logs-writer
   subjects:
     - kind: ServiceAccount
       name: otel-collector-deployment
       namespace: openshift-logging

4. 创建 OpenTelemetryCollector 自定义资源 (CR) 对象。

   OpenTelemetryCollector CR 对象示例

   apiVersion: opentelemetry.io/v1beta1
   kind: OpenTelemetryCollector
   metadata:
     name: otel
     namespace: openshift-logging
   spec:
     serviceAccount: otel-collector-deployment
     config:
       extensions:
         bearertokenauth:
           filename: "/var/run/secrets/kubernetes.io/serviceaccount/token"
       receivers:
         otlp:
           protocols:
             grpc: {}
             http: {}
       processors:
         k8sattributes: {}
         resource:
           attributes: 

   1

   
             - key:  kubernetes.namespace_name
               from_attribute: k8s.namespace.name
               action: upsert
             - key:  kubernetes.pod_name
               from_attribute: k8s.pod.name
               action: upsert
             - key: kubernetes.container_name
               from_attribute: k8s.container.name
               action: upsert
             - key: log_type
               value: application
               action: upsert
         transform:
           log_statements:
             - context: log
               statements:
                 - set(attributes["level"], ConvertCase(severity_text, "lower"))
       exporters:
         otlphttp:
           endpoint: https://logging-loki-gateway-http.openshift-logging.svc.cluster.local:8080/api/logs/v1/application/otlp
           encoding: json
           tls:
             ca_file: "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt"
           auth:
             authenticator: bearertokenauth
         debug:
           verbosity: detailed
       service:
         extensions: [bearertokenauth] 

   2

   
         pipelines:
           logs:
             receivers: [otlp]
             processors: [k8sattributes, transform, resource]
             exporters: [otlphttp] 

   3

   
           logs/test:
             receivers: [otlp]
             processors: []
             exporters: [debug]

   1

   提供 Web 控制台要使用的以下资源属性： kubernetes.namespace_name,kubernetes.pod_name,kubernetes.container_name, 和 log_type。

   2

   启用 OTLP HTTP Exporter 所需的 BearerTokenAuth Extension。

   3

   启用 OTLP HTTP Exporter 从 Collector 导出日志。