3.3. 使用 Cryostat 代理和 JMX 连接配置应用程序

流程

1. 安装 Cryostat 代理。对于使用 Maven 的应用构建，请使用 Cryostat 代理 JAR 文件信息更新应用 pom.xml 文件。

   pom.xml 文件示例

   <project>
     ...
     <repositories>
       <repository>
         <id>redhat-maven-repository</id>
         <url>https://maven.repository.redhat.com/earlyaccess/all/</url>
       </repository>
     </repositories>
     ...
     <build>
       <plugins>
         <plugin>
           <artifactId>maven-dependency-plugin</artifactId>
           <version>3.3.0</version>
           <executions>
             <execution>
               <phase>prepare-package</phase>
               <goals>
                 <goal>copy</goal>
               </goals>
               <configuration>
                 <artifactItems>
                   <artifactItem>
                     <groupId>io.cryostat</groupId>
                     <artifactId>cryostat-agent</artifactId>
                     <version>0.3.0.redhat-00001</version>
                     <classifier>shaded</classifier>
                   </artifactItem>
                 </artifactItems>
                 <stripVersion>true</stripVersion>
               </configuration>
             </execution>
           </executions>
         </plugin>
       </plugins>
       ...
     </build>
     ...
   </project>

2. 修改应用程序部署：

   示例

   apiVersion: apps/v1
   kind: Deployment
   ...
   spec:
     ...
     template:
       ...
       spec:
         containers:
           - name: sample-app
             image: docker.io/myorg/myapp:latest
             env:
               - name: CRYOSTAT_AGENT_APP_NAME
                 value: "myapp"
                 # Replace this with the Kubernetes DNS record
                 # for the Cryostat Service
               - name: CRYOSTAT_AGENT_BASEURI
                 value: "http://cryostat.mynamespace.mycluster.svc:8181"
               - name: POD_IP
                 valueFrom:
                   fieldRef:
                     fieldPath: status.podIP
               - name: CRYOSTAT_AGENT_CALLBACK
                 value: "http://$(POD_IP):9977"
               - name: CRYOSTAT_AGENT_AUTHORIZATION
                 # Replace "abcd1234" with a base64-encoded authentication token
                 value: "Bearer abcd1234"
                 # This environment variable is key to the Cryostat agent
                 # and JMX "hybrid" setup.
                 # Set the Cryostat agent to register itself with Cryostat
                 # as reachable through JMX, rather than reachable through HTTP.
               - name: CRYOSTAT_AGENT_REGISTRATION_PREFER_JMX
                 value: "true"
                 # Configure the application to load the agent JAR file and
                 # to enable JMX, so that the Cryostat agent can register
                 # itself as reachable through JMX.
                 # To configure authentication and SSL/TLS for the JMX
                 # connections, see <1>.
               - name: JAVA_OPTS
                 value: >-
                   -javaagent:/deployments/app/cryostat-agent-shaded.jar
                   -Dcom.sun.management.jmxremote.port=9091 1
             ports:
               - containerPort: 9977
                 protocol: TCP
             resources: {}
         restartPolicy: Always
   status: {}

   <1>：要为 JMX 连接配置身份验证和 SSL/TLS，并查看更多配置选项，请参阅使用 JMX 连接 配置应用程序。

3. 要启用 Cryostat 来检测目标应用程序并连接到 Cryostat 代理，请配置 应用程序服务 ：

   示例

   apiVersion: v1
   kind: Service
   ...
   spec:
     ports:
       - name: "jfr-jmx"
         port: 9091
         targetPort: 9091
       - name: "cryostat-agent"
         port: 9977
         targetPort: 9977
   ...