English | 简体中文
KubeProber is a diagnostic tool designed for large-scale Kubernetes clusters. It is used to perform diagnostic items in the kubernetes cluster to prove that the functions of the cluster are normal, KubeProber has the following characteristics:
- Large-scale clusters support Supports multi-cluster management, supports configuring the relationship between clusters and diagnostic items on the management side and viewing the diagnostic results of all clusters in a unified manner;
- Cloud Native The core logic is implemented by operator, providing complete Kubernetes API compatibility;
- Extensible Support user-defined diagnostic items
Different from the monitoring system, KubeProber proves the functions of the cluster are normal from the perspective of diagnostic. Monitoring is a forward link and cannot cover all scenarios in the system. The monitoring data of each environment in the system is normal and cannot prove the system is 100% normal, so a tool is needed to prove the availability of the system from the reverse, and fundamentally to discover unavailable points in the cluster before users, such as:
- Whether all nodes in the set can be scheduled, whether there are special taints, etc;
- Whether the pod can be normally created, destroyed, and verified the entire link from kubernetes, kubelet to docker;
- Create a service and test unicom to verify whether the kube-proxy link is normal;
- Resolve an internal or external domain name to verify whether CoreDNS is working properly;
- Visit an ingress domain name to verify whether the ingress component in the cluster is working properly;
- Create and delete a namespace to verify whether the related webhook is working properly;
- Perform operations such as put/get/delete on Etcd to verify whether Etcd is running normally;
- Verify the normal operation of MySQL through the operation of mysql-client;
- Simulate users to log in and operate the business system to verify whether the main business process is frequent;
- Check whether the certificates of each environment have expired;
- Expiration check of cloud resources;
- ... more!
The operator running on the management cluster. This operator maintains two CRDs, one is Cluster, which is used to manage the managed cluster, and the other is Probe, which is used to manage the built-in and user-written diagnostic items, probe-master Through watch these two CRDs, the latest diagnostic configuration is pushed to the managed cluster, and probe-master provides an interface for viewing the diagnosis results of the managed cluster.
The operator running on the managed cluster. This operator maintains two CRDs. One is a Probe that is exactly the same as the probe-master. The probe-agent executes the cluster’s diagnostic items according to the definition of the probe. The other is ProbeStatus for Record the diagnosis results of each Probe. Users can view the diagnosis results of the cluster through kubectl get probestatus in the managed cluster.
Both the master and agent of kubeprober run as controllers in kubernetes. Before installation, make sure that you have deployed the kubernetes cluster and can access it using kubectl.
make install
APP_NAME=probe-master make deploy
Before deploying the agent, make sure that you have created a cluster in the master, and modify the configmap configuration after creating the cluster:
vim config/setup/probe-agent/deployment.yaml
apiVersion: v1
kind: ConfigMap
metadata:
name: kubeprober
namespace: kubeprober
data:
PROBE_MASTER_ADDR: http://10.107.114.92:8088
CLUSTER_NAME: moon
SECRET_KEY: a944499f-97f3-4986-89fa-bc7dfc7e009a
install probe-agent
make install
APP_NAME=probe-agent make deploy
You can run and build probe-master and probe-agent locally. please make sure that ~/.kube/config can access the kubernetes cluster.
APP_NAME=probe-master make run
export PROBE_MASTER_ADDR="http://127.0.0.1:8088"
export CLUSTER_NAME="moon"
export SECRET_KEY="a944499f-97f3-4986-89fa-bc7dfc7e009a"
APP_NAME=probe-agent make run
APP_NAME=probe-master make build
APP_NAME=probe-agent make build
APP_NAME=probe-master make docker-build
APP_NAME=probe-agent make docker-build
TODO
Contributions are always welcomed. Please refer to Contributing to KubeProber for details.
If you have any questions, please feel free to contact us.
-
Email: [email protected]
-
Zhihu：Erda技术团队 (A Chinese knowledge community, similar to Quora.)
-
WeChat Official Account:
KubeProber is under the AGPL 3.0 license. See the LICENSE file for details.