使用KRAWL扫描Kubernetes以获取错误

最新推荐文章于 2024-09-20 14:29:43 发布

cumo7370

最新推荐文章于 2024-09-20 14:29:43 发布

阅读量145

点赞数

文章标签： kubernetes java linux docker python

原文链接：https://opensource.com/article/20/2/kubernetes-scanner

版权

但是，如果用于管理容器的平台不符合您的要求，您也可以仅使用Kubernetes工具链来获取该信息，但是需要大量命令来全面了解复杂的环境。因此，我编写了一个简单的脚本KRAWL ，它扫描Kubernetes集群上命名空间下的Pod和容器，并显示事件的输出（如果有的话）。出于相同的目的，它也可以用作Kubernetes插件。这是获取大量有用信息的快速简便的方法。

先决条件

您必须已安装kubectl。
群集的kubeconfig必须位于其默认位置（$ HOME / .kube / config）或已导出（KUBECONFIG = / path / to / kubeconfig）。

用法

 $  . / krawl

剧本


   
   
    
    
     
     #!/bin/bash
     
     

# AUTHOR: Abhishek Tamrakar
     
     

# EMAIL: abhishek.tamrakar08@gmail.com
     
     

# LICENSE: Copyright (C) 2018 Abhishek Tamrakar
     
     

#
     
     

#  Licensed under the Apache License, Version 2.0 (the "License");
     
     

#  you may not use this file except in compliance with the License.
     
     

#  You may obtain a copy of the License at
     
     

#
     
     

#       http://www.apache.org/licenses/LICENSE-2.0
     
     

#
     
     

#   Unless required by applicable law or agreed to in writing, software
     
     

#   distributed under the License is distributed on an "AS IS" BASIS,
     
     

#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     
     

#   See the License for the specific language governing permissions and
     
     

#   limitations under the License.
     
     

##
     
     

#define the variables
     
     

KUBE_LOC=~/.kube/config
     
     

#define variables
     
     

KUBECTL=$(which kubectl)
     
     

GET=$(which egrep)
     
     

AWK=$(which awk)
     
     

red=$(tput setaf 1)
     
     

normal=$(tput sgr0)
     
     

# define functions
     
     


     
     

# wrapper for printing info messages
     
     

info()
     
     

{
     
     

  printf '\n\e[34m%s\e[m: %s\n' "INFO" "$@"
     
     

}
     
     


     
     

# cleanup when all done
     
     

cleanup()
     
     

{
     
     

  rm -f results.csv
     
     

}
     
     


     
     

# just check if the command we are about to call is available
     
     

checkcmd()
     
     

{
     
     

  #check if command exists
     
     

  local cmd=$1
     
     

  if [ -z "${!cmd}" ]
     
     

  then
     
     

    printf '\n\e[31m%s\e[m: %s\n' "ERROR"  "check if $1 is installed !!!"
     
     

    exit 1
     
     

  fi
     
     

}
     
     


     
     

get_namespaces()
     
     

{
     
     

  #get namespaces
     
     

  namespaces=( \
     
     

          $($KUBECTL get namespaces --ignore-not-found=true | \
     
     

          $AWK '/Active/ {print $1}' \
     
     

          ORS=" ") \
     
     

          )
     
     

#exit if namespaces are not found
     
     

if [ ${#namespaces[@]} -eq 0 ]
     
     

then
     
     

  printf '\n\e[31m%s\e[m: %s\n' "ERROR"  "No namespaces found!!"
     
     

  exit 1
     
     

fi
     
     

}
     
     


     
     

#get events for pods in errored state
     
     

get_pod_events()
     
     

{
     
     

  printf '\n'
     
     

  if [ ${#ERRORED[@]} -ne 0 ]
     
     

  then
     
     

      info "${#ERRORED[@]} errored pods found."
     
     

      for CULPRIT in ${ERRORED[@]}
     
     

      do
     
     

        info "POD: $CULPRIT"
     
     

        info
     
     

        $KUBECTL get events \
     
     

        --field-selector=involvedObject.name=$CULPRIT \
     
     

        -ocustom-columns=LASTSEEN:.lastTimestamp,REASON:.reason,MESSAGE:.message \
     
     

        --all-namespaces \
     
     

        --ignore-not-found=true
     
     

      done
     
     

  else
     
     

      info "0 pods with errored events found."
     
     

  fi
     
     

}
     
     


     
     

#define the logic
     
     

get_pod_errors()
     
     

{
     
     

  printf "%s %s %s\n" "NAMESPACE,POD_NAME,CONTAINER_NAME,ERRORS" > results.csv
     
     

  printf "%s %s %s\n" "---------,--------,--------------,------" >> results.csv
     
     

  for NAMESPACE in ${namespaces[@]}
     
     

  do
     
     

    while IFS=' ' read -r POD CONTAINERS
     
     

    do
     
     

      for CONTAINER in ${CONTAINERS//,/ }
     
     

      do
     
     

        COUNT=$($KUBECTL logs --since=1h --tail=20 $POD -c $CONTAINER -n $NAMESPACE 2>/dev/null| \
     
     

        $GET -c '^error|Error|ERROR|Warn|WARN')
     
     

        if [ $COUNT -gt 0 ]
     
     

        then
     
     

            STATE=("${STATE[@]}" "$NAMESPACE,$POD,$CONTAINER,$COUNT")
     
     

        else
     
     

        #catch pods in errored state
     
     

            ERRORED=($($KUBECTL get pods -n $NAMESPACE --no-headers=true | \
     
     

                awk '!/Running/ {print $1}' ORS=" ") \
     
     

                )
     
     

        fi
     
     

      done
     
     

    done< <($KUBECTL get pods -n $NAMESPACE --ignore-not-found=true -o=custom-columns=NAME:.metadata.name,CONTAINERS:.spec.containers[*].name --no-headers=true)
     
     

  done
     
     

  printf "%s\n" ${STATE[@]:-None} >> results.csv
     
     

  STATE=()
     
     

}
     
     

#define usage for seprate run
     
     

usage()
     
     

{
     
     

cat << EOF
     
     


     
     

  USAGE: "${0##*/} </path/to/kube-config>(optional)"
     
     


     
     

  This program is a free software under the terms of Apache 2.0 License.
     
     

  COPYRIGHT (C) 2018 Abhishek Tamrakar
     
     


     
     

EOF
     
     

exit 0
     
     

}
     
     


     
     

#check if basic commands are found
     
     

trap cleanup EXIT
     
     

checkcmd KUBECTL
     
     

#
     
     

#set the ground
     
     

if [ $# -lt 1 ]; then
     
     

  if [ ! -e ${KUBE_LOC} -a ! -s ${KUBE_LOC} ]
     
     

  then
     
     

    info "A readable kube config location is required!!"
     
     

    usage
     
     

  fi
     
     

elif [ $# -eq 1 ]
     
     

then
     
     

  export KUBECONFIG=$1
     
     

elif [ $# -gt 1 ]
     
     

then
     
     

  usage
     
     

fi
     
     

#play
     
     

get_namespaces
     
     

get_pod_errors
     
     


     
     

printf '\n%40s\n' 'KRAWL'
     
     

printf '%s\n' '---------------------------------------------------------------------------------'
     
     

printf '%s\n' '  Krawl is a command line utility to scan pods and prints name of errored pods   '
     
     

printf '%s\n\n' ' +and containers within. To use it as kubernetes plugin, please check their page '
     
     

printf '%s\n' '================================================================================='
     
     


     
     

cat results.csv | sed 's/,/,|/g'| column -s ',' -t
     
     

get_pod_events