ECS Fargate 上部署 SkyWalking UI 并通过 ALB 提供服务

最新推荐文章于 2024-10-02 12:58:52 发布

flybirding10011

最新推荐文章于 2024-10-02 12:58:52 发布

阅读量364

点赞数 4

文章标签： skywalking ui

本文链接：https://blog.csdn.net/cpongo1/article/details/139932503

版权

在本篇文章中，我们将演示如何使用 AWS CLI 在 ECS Fargate 上部署 SkyWalking UI，并通过 Application Load Balancer (ALB) 提供公网访问入口，同时确保容器无法直接从公网访问。以下是详细步骤：

1. 创建 ALB

aws elbv2 create-load-balancer\
  --name skywalking-ui-alb \
  --scheme internet-facing \
  --type application \
  --subnets <your-subnet-id-1> <your-subnet-id-2>

记录返回的 ALB ARN，例如：arn:aws:elasticloadbalancing:us-east-1:123456789012:loadbalancer/app/skywalking-ui-alb/abcdef0123456789。

2. 创建 ALB 目标组

aws elbv2 create-target-group\
  --name skywalking-ui-alb-tg \
  --protocol HTTP \
  --port 8080 \
  --vpc-id <your-vpc-id> \
  --target-type ip

记录返回的目标组 ARN，例如：arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/skywalking-ui-alb-tg/abcdef0123456789。

3. 创建 ALB 监听器

aws elbv2 create-listener\
  --load-balancer-arn <your-alb-arn> \
  --protocol HTTP \
  --port 80 \
  --default-actions Type=forward,TargetGroupArn=<your-alb-tg-arn>

4. 创建任务定义 JSON 文件 (skywalking-ui-task.json)

{
  "family": "skywalking-ui-task",
  "executionRoleArn": "ecsTaskExecutionRole",
  "networkMode": "awsvpc",
  "containerDefinitions": [
    {
      "name": "skywalking-ui",
      "image": "apache/skywalking-ui:9.1.0",
      "portMappings": [
        {
          "containerPort": 8080,
          "hostPort": 8080,
          "protocol": "tcp"
        }
      ],
      "environment": [
        {
          "name": "SW_OAP_ADDRESS",
          "value": "http://dev-skywalking-oap-server.skywalking-oap.local:12800"
        }
      ],
      "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-create-group": "true",
          "awslogs-group": "/ecs/skywalking-ui",
          "awslogs-region": "us-east-1",
          "awslogs-stream-prefix": "ecs"
        }
      }
    }
  ],
  "requiresCompatibilities": [
    "FARGATE"
  ],
  "cpu": "512",
  "memory": "1024"
}

5. 注册任务定义

记录返回的任务定义 ARN，例如：arn:aws:ecs:us-east-1:123456789012:task-definition/skywalking-ui-task:1。

6. 创建 ECS 服务

创建一个名为 skywalking-ui-service.json 的文件，内容如下：

{
  "cluster": "<your-ecs-cluster-name>",
  "serviceName": "skywalking-ui-service",
  "taskDefinition": "<your-task-definition-arn>",
  "desiredCount": 1,
  "deploymentConfiguration": {
    "maximumPercent": 200,
    "minimumHealthyPercent": 100
  },
  "launchType": "FARGATE",
  "schedulingStrategy": "REPLICA",
  "networkConfiguration": {
    "awsvpcConfiguration": {
      "subnets": [
        "<your-subnet-id-1>",
        "<your-subnet-id-2>"
      ],
      "securityGroups": [
        "<your-security-group-id>"
      ],
      "assignPublicIp": "DISABLED"
    }
  },
  "loadBalancers": [
    {
      "targetGroupArn": "<your-alb-tg-arn>",
      "containerName": "skywalking-ui",
      "containerPort": 8080
    }
  ]
}