1.8. 关于工作负载可用性 Operator 的指标

流程

1. 从现有的 prometheus-user-workload-token secret 创建 prometheus-user-token secret，如下所示：

   existingPrometheusTokenSecret=$(kubectl get secret --namespace openshift-user-workload-monitoring | grep prometheus-user-workload-token | awk '{print $1}') 

   1

   
   
   kubectl get secret ${existingPrometheusTokenSecret} --namespace=openshift-user-workload-monitoring -o yaml | \
       sed '/namespace: .*==/d;/ca.crt:/d;/serviceCa.crt/d;/creationTimestamp:/d;/resourceVersion:/d;/uid:/d;/annotations/d;/kubernetes.io/d;' | \
       sed 's/namespace: .*/namespace: openshift-workload-availability/' | \ 

   2

   
       sed 's/name: .*/name: prometheus-user-workload-token/' | \ 

   3

   
       sed 's/type: .*/type: Opaque/' | \
       > prom-token.yaml
   
   kubectl apply -f prom-token.yaml

   1

   Metric ServiceMonitor 需要 prometheus-user-token，在下一步中创建。

   2

   确保新 Secret 的命名空间是安装 NHC Operator 的命名空间，如 openshift-workload-availability。

   3

   只有启用了 User Worload Prometheus scrape 时，prometheus-user-workload-token 才会存在。

2. 按如下方式创建 ServiceMonitor：

   apiVersion: monitoring.coreos.com/v1
   kind: ServiceMonitor
   metadata:
     name: node-healthcheck-metrics-monitor
     namespace: openshift-workload-availability 

   1

   
     labels:
       app.kubernetes.io/component: controller-manager
   spec:
     endpoints:
     - interval: 30s
       port: https
       scheme: https
       authorization:
         type: Bearer
         credentials:
           name: prometheus-user-workload-token
           key: token
       tlsConfig:
         ca:
           configMap:
             name: nhc-serving-certs-ca-bundle
             key: service-ca.crt
         serverName: node-healthcheck-controller-manager-metrics-service.openshift-workload-availability.svc 

   2

   
     selector:
       matchLabels:
         app.kubernetes.io/component: controller-manager
         app.kubernetes.io/name: node-healthcheck-operator
         app.kubernetes.io/instance: metrics

   1

   指定要配置指标的命名空间，如 openshift-workload-availability。

   2

   serverName 必须包含安装 Operator 的同一命名空间。在示例中，openshift-workload-availability 将放置在指标服务名称后面，并在 filetype 扩展之前放置。