openshift logging efk部署及问题解决

注:本blog所有关于openshift的文字都是基于openshift origin v1.4.1

先说坑:报错解决:

问题1: 安装完efk,访问kibana时候报错:

kibana上黄色条条显示:  Discover: [security_exception] no permissions for indices:data/read/field_stats

解决:master上执行

oadm policy add-cluster-role-to-user rolebinding-reader system:serviceaccount:logging:aggregated-logging-elasticsearch

参考:https://bugzilla.redhat.com/show_bug.cgi?id=1388045 

问题2:

kibana需要不报错,却没日志显示

解决: 使用匹配的image v1.4.1, 当我用latest的时候出现的这个问题,改用了v1.4.1的logging组件的image后正常显示.

完整的efk创建和cleanup的代码,因为我搞了很多次才成功,所以有必要cleanup重新搞搞

openshift创建efk

oc project logging

oc label node node1.ma.com label=log

oc label node node2.ma.com label=log

oc label node master.ma.com label=log

oc get node -L label

 

 

 

oc secrets new logging-deployer nothing=/dev/null

oc new-app logging-deployer-account-template

 

oc policy add-role-to-user edit --serviceaccount logging-deployer

oc policy add-role-to-user daemonset-admin --serviceaccount logging-deployer

oc adm policy add-cluster-role-to-user oauth-editor system:serviceaccount:logging:logging-deployer

oc adm policy add-scc-to-user privileged system:serviceaccount:logging:aggregated-logging-fluentd

oc adm policy add-cluster-role-to-user cluster-reader system:serviceaccount:logging:aggregated-logging-fluentd

oadm policy add-cluster-role-to-user rolebinding-reader system:serviceaccount:logging:aggregated-logging-elasticsearch

oc label nodes --all logging-infra-fluentd=true

oc new-app logging-deployer-template \

--param KIBANA_HOSTNAME=kibana.ma.com \

--param ES_CLUSTER_SIZE=1 \

--param PUBLIC_MASTER_URL=https://master.ma.com:8443

 

oc delete dc logging-curator

oc delete dc logging-es-ydh3dodb

oc delete dc logging-kibana

 

oc delete clusterrole oauth-editor daemonset-admin rolebinding-reader

oc delete rolebinding logging-deployer-edit-role logging-deployer-dsadmin-role logging-elasticsearch-view-role

 

oc delete all --selector logging-infra=kibana

oc delete all --selector logging-infra=fluentd

oc delete all --selector logging-infra=elasticsearch

oc delete all --selector logging-infra=curator

oc delete all,sa,oauthclient --selector logging-infra=support

oc delete secret logging-fluentd logging-elasticsearch \

logging-es-proxy logging-kibana logging-kibana-proxy \

logging-kibana-ops-proxy

 oc delete daemonsets.extensions logging-fluentd

 

oc delete sa logging-deployer

oc delete sa aggregated-logging-curator

oc delete sa aggregated-logging-elasticsearch

oc delete sa aggregated-logging-fluentd

oc delete sa aggregated-logging-kibana

 

oc delete template logging-curator-template

oc delete template logging-es-template

oc delete template logging-fluentd-template

oc delete template logging-imagestream-template

oc delete template logging-kibana-template

oc delete template logging-pvc-dynamic-template

oc delete template logging-pvc-template

oc delete template logging-support-template