# 创建命名空间
kubectl create namespace monitoring
namespace/monitoring created

# 使用Helm安装Prometheus
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
helm install prometheus prometheus-community/prometheus –namespace monitoring
NAME: prometheus
LAST DEPLOYED: Sun Oct 1 10:00:00 2023
NAMESPACE: monitoring
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
The Prometheus server can be accessed via port 9090 on the following DNS name from within your cluster:
prometheus-server.monitoring.svc.cluster.local

Get the Prometheus server URL by running these commands in the same shell:
export POD_NAME=$(kubectl get pods –namespace monitoring -l “app=prometheus,component=server” -o jsonpath=”{.items[0].metadata.name}”)
kubectl –namespace monitoring port-forward $POD_NAME 9090

The Prometheus alertmanager can be accessed via port 9093 on the following DNS name from within your cluster:
prometheus-alertmanager.monitoring.svc.cluster.local

Get the Alertmanager URL by running these commands in the same shell:
export POD_NAME=$(kubectl get pods –namespace monitoring -l “app=prometheus,component=alertmanager” -o jsonpath=”{.items[0].metadata.name}”)
kubectl –namespace monitoring port-forward $POD_NAME 9093

# 验证Prometheus部署
kubectl get pods -n monitoring
NAME READY STATUS RESTARTS AGE
prometheus-alertmanager-5f984b76c5-4x7k8 1/1 Running 0 5m
prometheus-kube-state-metrics-5f984b76c5-7q2xz 1/1 Running 0 5m
prometheus-node-exporter-2v3b4 1/1 Running 0 5m
prometheus-node-exporter-5c6d7 1/1 Running 0 5m，
prometheus-node-exporter-8e9f0 1/1 Running 0 5m
prometheus-server-5f984b76c5-9p8kf 1/1 Running 0 5m

# 配置Prometheus抓取目标
cat > prometheus-config.yaml << EOF
apiVersion: v1
kind: ConfigMap
metadata:
name: prometheus-server-conf
namespace: monitoring
labels:
app: prometheus
data:
prometheus.yml: |
global:
scrape_interval: 15s
evaluation_interval: 15s
scrape_configs:
– job_name: ‘kubernetes-apiservers’
kubernetes_sd_configs:
– role: endpoints
scheme: https
tls_config:
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
relabel_configs:
– source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]
action: keep
regex: default;kubernetes;https
– job_name: ‘kubernetes-nodes’
kubernetes_sd_configs:
– role: node
scheme: https
tls_config:
ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
relabel_configs:
– action: labelmap
regex: __meta_kubernetes_node_label_(.+)
– target_label: __address__
replacement: kubernetes.default.svc:443
– source_labels: [__meta_kubernetes_node_name]
regex: (.+)
target_label: __metrics_path__
replacement: /api/v1/nodes/${1}/proxy/metrics
– job_name: ‘kubernetes-pods’
kubernetes_sd_configs:
– role: pod
relabel_configs:
– source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape]
action: keep
regex: true
– source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path]
action: replace
target_label: __metrics_path__
regex: (.+)
– source_labels: [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port]
action: replace
regex: ([^:]+)(?::\d+)?;(\d+)
replacement: $1:$2
target_label: __address__，
– action: labelmap
regex: __meta_kubernetes_pod_label_(.+)
– source_labels: [__meta_kubernetes_namespace]
action: replace
target_label: kubernetes_namespace
– source_labels: [__meta_kubernetes_pod_name]
action: replace
target_label: kubernetes_pod_name
EOF
kubectl apply -f prometheus-config.yaml
configmap/prometheus-server-conf created

# 使用Helm安装Grafana
helm repo add grafana https://grafana.github.io/helm-charts
helm repo update
helm install grafana grafana/grafana –namespace monitoring
NAME: grafana
LAST DEPLOYED: Sun Oct 1 10:30:00 2023
NAMESPACE: monitoring
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
1. Get your ‘admin’ user password by running:
kubectl get secret –namespace monitoring grafana -o jsonpath=”{.data.admin-password}” | base64 –decode ; echo

2. The Grafana server can be accessed via port 80 on the following DNS name from within your cluster:
grafana.monitoring.svc.cluster.local

Get the Grafana URL to visit by running these commands in the same shell:
export POD_NAME=$(kubectl get pods –namespace monitoring -l “app.kubernetes.io/name=grafana” -o jsonpath=”{.items[0].metadata.name}”)
kubectl –namespace monitoring port-forward $POD_NAME 3000

3. Login with the password from step 1 and the username: admin

# 验证Grafana部署
kubectl get pods -n monitoring | grep grafana
grafana-5f984b76c5-4x7k8 1/1 Running 0 5m

# 获取Grafana管理员密码
kubectl get secret –namespace monitoring grafana -o jsonpath=”{.data.admin-password}” | base64 –decode ; echo
fgedu123456

# 配置Grafana数据源
cat > grafana-datasource.yaml << EOF
apiVersion: v1
kind: ConfigMap
metadata:
name: grafana-datasource
namespace: monitoring
data:
prometheus-datasource.yaml: |，
apiVersion: 1
datasources:
– name: Prometheus
type: prometheus
url: http://prometheus-server.monitoring.svc.cluster.local:9090
access: proxy
isDefault: true
EOF
kubectl apply -f grafana-datasource.yaml
configmap/grafana-datasource created

# 导入Kubernetes监控面板
cat > kubernetes-dashboard.json << EOF
{
“annotations”: {
“list”: [
{
“builtIn”: 1,
“datasource”: “– Grafana –“,
“enable”: true,
“hide”: true,
“iconColor”: “rgba(0, 211, 255, 1)”,
“name”: “Annotations & Alerts”,
“type”: “dashboard”
}
]
},
“editable”: true,
“gnetId”: 15757,
“graphTooltip”: 0,
“id”: null,
“links”: [],
“panels”: [],
“schemaVersion”: 34,
“style”: “dark”,
“tags”: [“kubernetes”],
“templating”: {
“list”: []
},
“time”: {
“from”: “now-1h”,
“to”: “now”
},
“timepicker”: {},
“timezone”: “”,
“title”: “Kubernetes Cluster”,
“uid”: “kubernetes-cluster”,
“version”: 1
}
EOF

# 端口转发访问Grafana
kubectl port-forward -n monitoring grafana-5f984b76c5-4x7k8 3000:3000 &
Forwarding from 127.0.0.1:3000 -> 3000
Forwarding from [::1]:3000 -> 3000