提供对堆的身份验证以连接到GKE中的安全kube API服务器 [英] Provide authentication for heapster to connect to secured kube API server in GKE

问题描述

我正在尝试在集群中部署 heapster 并收集指标并将其存储在 Influxdb 中.我可以为 Influxdb 提供接收器.但是我不确定如何为-source 标志提供值以连接到安全的kube API服务器.有人可以帮我找出这个问题吗.

I am trying to deploy heapster in a cluster and collect metrics and store it in Influxdb. I can provide sink for Influxdb. But I am not sure how to provide the value for --source flag to connect to the secured kube API server. Can someone help me to find out this.

注意:我正在尝试在与 kube API服务器正在运行.

Note: I am trying to deploy heapster in the same cluster where the kube API server is running.

谢谢.

推荐答案

我找到了解决方案.我正在使用的参数是

I found out the solution for this. The parameter that I am using is

-source = kubernetes: https://masterIP吗? auth =/var/lib/kube-proxy/kubeconfig& apiVersion = v1

-sink = influxdb: http://influxdbIP:8086?user = xxx& pw = xxx& db = xxx

--sink=influxdb:http://influxdbIP:8086?user=xxx&pw=xxx&db=xxx

我将/var/lib/kube-proxy/kubeconfig装入了kube-proxy使用的heapster容器，现在heapster可以与安全的API服务器通信. 我也将heapster图像更改为gcr.io/google_containers/heapster:v1.2.0

I mounted /var/lib/kube-proxy/kubeconfig to the heapster container which is used by the kube-proxy and now the heapster can talk to the secured API server. Also I changed the heapster image to gcr.io/google_containers/heapster:v1.2.0

注意:InfluxDB必须是最新版本才能使此工作正常进行.我正在使用v1.2

Note: InfluxDB must be of the latest version in order to make this work. I am using v1.2

我不确定这是否是正确的方法.但这对我有用.

I am not sure if this is the right method. But it works out for me.

感谢您的所有答复.

这篇关于提供对堆的身份验证以连接到GKE中的安全kube API服务器的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！