SkyWalking进阶使用

Info

这两年 SkyWalking 增加了很多功能,其中就有集成 Kubernetes ,详细部署参考如何优雅的使用SkyWalking

安装 10.x SkyWalking 使用自建 es

1 安装时配置

fullnameOverride: skywalking
oap:
  image:
    repository: ccr.ccs.tencentyun.com/ccops/tmp
    tag: skywalking-oap-server-10.1.0
    pullPolicy: IfNotPresent
  storageType: elasticsearch
  ingress:
    enabled: true
    annotations: 
      kubernetes.io/ingress.class: traefik-class
    path: /
    hosts: skywalking.ccops.com
    tls: []

ui:
  image:
    repository: ccr.ccs.tencentyun.com/ccops/tmp
    tag: skywalking-ui-10.1.0
    pullPolicy: IfNotPresent

elasticsearch:
  enabled: false
  config:
    host: 10.1.1.1
    port:
      http: 9200
    user: "root"
    password: "passwd"

helm install skywalking skywalking -n skywalking -f ./skywalking/values-my-es.yaml

2 云原生

2.1 Cilium 集成

Cilium需要提前开启监控

开启监控参考
 监控开启 tls 参考
开启 tls 后需要配置证书secret,名字为hubble-server-certs

oap:
  image:
  ....
  env: 
    SW_CILIUM_FETCHER: default
    SW_CILIUM_FETCHER_PEER_HOST: hubble-peer.kube-system
    SW_CILIUM_FETCHER_PEER_PORT: 443
    SW_CILIUM_FETCHER_SSL_CONNECTION: true
    SW_CILIUM_FETCHER_PRIVATE_KEY_FILE_PATH: /usr/share/certs/hubble/tls.key
    SW_CILIUM_FETCHER_CERT_CHAIN_FILE_PATH: /usr/share/certs/hubble/tls.crt
    SW_CILIUM_FETCHER_CA_FILE_PATH: /usr/share/certs/hubble/ca.crt
  secretMounts: 
  - name: hubble-server-certs
    secretName: hubble-server-certs
    path: /usr/share/certs/hubble