1
---
2
apiVersion: v1
3
kind: ServiceAccount
4
metadata:
5
  name: goldpinger-serviceaccount
6
  namespace: goldpinger
7

8
---
9
apiVersion: apps/v1
10
kind: DaemonSet
11
metadata:
12
  name: goldpinger
13
  namespace: goldpinger
14
  annotations:
15
    link.argocd.argoproj.io/external-link: http://10.1.167.173:30080 #argocd显示跳转的链接
16
  labels:
17
    app: goldpinger
18
spec:
19
  updateStrategy:
20
    type: RollingUpdate
21
  selector:
22
    matchLabels:
23
      app: goldpinger
24
  template:
25
    metadata:
26
      labels:
27
        app: goldpinger
28
    spec:
29
      serviceAccount: "goldpinger-serviceaccount"
30
      securityContext:
31
        runAsNonRoot: true
32
        runAsUser: 1000
33
        fsGroup: 2000
34
      containers:
35
        - name: goldpinger
36
          env:
37
            - name: HOST
38
              value: "0.0.0.0"
39
            - name: PORT
40
              value: "8080"
41
            - name: HOSTNAME
42
              valueFrom:
43
                fieldRef:
44
                  fieldPath: spec.nodeName
45
            - name: POD_IP
46
              valueFrom:
47
                fieldRef:
48
                  fieldPath: status.podIP
49
            - name: HOSTS_TO_RESOLVE
50
              value: "www.baidu.com ccops.cc kubernetes.default" # 要检测解析域名
51
            - name: HTTP_TARGETS
52
              value: http://ccops.cc # 要检测访问域名
53
            - name: TCP_TARGETS
54
              value: 8.8.8.8:53  # 要检测使用的dns服务器
55
          image: "docker.io/bloomberg/goldpinger:v3.7.0"
56
          imagePullPolicy: Always
57
          securityContext:
58
            allowPrivilegeEscalation: false
59
            readOnlyRootFilesystem: true
60
          resources:
61
            limits:
62
              memory: 80Mi
63
            requests:
64
              cpu: 1m
65
              memory: 40Mi
66
          ports:
67
            - containerPort: 8080
68
              name: http
69
          readinessProbe:
70
            httpGet:
71
              path: /healthz
72
              port: 8080
73
            initialDelaySeconds: 20
74
            periodSeconds: 5
75
          livenessProbe:
76
            httpGet:
77
              path: /healthz
78
              port: 8080
79
            initialDelaySeconds: 20
80
            periodSeconds: 5
81
---
82
apiVersion: v1
83
kind: Service
84
metadata:
85
  name: goldpinger
86
  namespace: goldpinger
87
  annotations:
88
    link.argocd.argoproj.io/external-link: http://10.1.167.173:30080
89
  labels:
90
    app: goldpinger
91
spec:
92
  type: NodePort
93
  ports:
94
    - port: 8080
95
      name: http
96
      nodePort: 30080 # 暴露的端口
97
  selector:
98
    app: goldpinger
99
---
100
apiVersion: rbac.authorization.k8s.io/v1
101
kind: ClusterRole
102
metadata:
103
  name: goldpinger-clusterrole
104
rules:
105
- apiGroups:
106
  - ""
107
  resources:
108
  - pods
109
  verbs:
110
  - list # 只给查看pod的权限
111

112
---
113
apiVersion: rbac.authorization.k8s.io/v1
114
kind: ClusterRoleBinding
115
metadata:
116
  name: goldpinger-clusterrolebinding
117
roleRef:
118
  apiGroup: rbac.authorization.k8s.io
119
  kind: ClusterRole
120
  name: goldpinger-clusterrole
121
subjects:
122
  - kind: ServiceAccount
123
    name: goldpinger-serviceaccount
124
    namespace: goldpinger

1
rules]# cat goldpinger.yml
2
groups:
3
- name: goldpinger
4
  rules:
5
  - alert: goldpinger_nodes_unhealthy
6
    expr: sum(goldpinger_nodes_health_total{status="unhealthy"})
7
      BY (instance, goldpinger_instance) > 0
8
    for: 5m
9
    annotations:
10
      description: |
11
        Goldpinger instance {{ $labels.goldpinger_instance }} has been reporting unhealthy nodes for at least 5 minutes.
12
      summary: 'Instance {{ $labels.instance }} down'
13
  - alert: goldpinger_http_unhealthy
14
    expr: sum(goldpinger_http_errors_total) BY (instance, goldpinger_instance, host) > 0
15
    for: 1m
16
    annotations:
17
      description: |
18
        Goldpinger instance {{ $labels.goldpinger_instance }} unable to access  {{ $labels.host }} for at least 1 minutes.
19
      summary: '{{ $labels.goldpinger_instance }} unable to access {{ $labels.host }}'
20
  - alert: goldpinger_tcp_unhealthy
21
    expr: sum(goldpinger_tcp_errors_total) BY (instance, goldpinger_instance, host) > 1
22
    for: 1m
23
    annotations:
24
      description: |
25
        Goldpinger instance {{ $labels.goldpinger_instance }} unable to access {{ $labels.host }} for at least 1 minutes.
26
      summary: '{{ $labels.goldpinger_instance }} unable to access {{ $labels.host }}'