基于rancher的kubernetes容器日志收集

由于Rancher server端是使用容器起来的，所以无法直接使用宿主机的本地路径
所以使用nfs映射宿主机路径
nfs搭建请参考我之前的博客

apiVersion: v1
kind: ServiceAccount
metadata:
  name: fluentd
  namespace: es
  labels:
    app: fluentd
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: fluentd
  labels:
    app: fluentd
rules:
- apiGroups:
  - ""
  resources:
  - pods
  - namespaces
  verbs:
  - get
  - list
  - watch
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: fluentd
roleRef:
  kind: ClusterRole
  name: fluentd
  apiGroup: rbac.authorization.k8s.io
subjects:
- kind: ServiceAccount
  name: fluentd
  namespace: es
---
apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: fluentd
  namespace: es
  labels:
    name: fluentd-logging
spec:
  template:
    metadata:
      labels:
        name: fluentd-logging
    spec:
      tolerations:
      - key: node-role.kubernetes.io/master
        effect: NoSchedule
      serviceAccount: fluentd
      serviceAccountName: fluentd
      containers:
      - name: fluentd
        image: xxxxxx/basicimage/fluentd-kubernetes-daemonset:v1-debian-elasticsearch
        env:
          - name:  FLUENT_ELASTICSEARCH_HOST
            value: "es-ip"
          - name:  FLUENT_ELASTICSEARCH_PORT
            value: "9200"
          - name: FLUENT_ELASTICSEARCH_SCHEME
            value: "http"
          - name: FLUENTD_SYSTEMD_CONF
            value: disable
          # Option to configure elasticsearch plugin with self signed certs
          # ================================================================
          - name: FLUENT_ELASTICSEARCH_SSL_VERIFY
            value: "true"
          # Option to configure elasticsearch plugin with tls
          # ================================================================
          - name: FLUENT_ELASTICSEARCH_SSL_VERSION
            value: "TLSv1_2"
          # X-Pack Authentication
          # =====================
          # - name: FLUENT_ELASTICSEARCH_USER
          #   value: "elastic"
          # - name: FLUENT_ELASTICSEARCH_PASSWORD
          #   value: "changeme"
          # Logz.io Authentication
          # ======================
          # - name: LOGZIO_TOKEN
          #   value: "ThisIsASuperLongToken"
          # - name: LOGZIO_LOGTYPE
          #   value: "kubernetes"
        volumeMounts:
        - name: varlog
          mountPath: /var/log
          # readOnly: true
        - name: varlibdockercontainers
          mountPath: /var/lib/docker/containers
          # readOnly: true
        - name: datalog
          mountPath: /data/docker/containers
          # readOnly: true
      terminationGracePeriodSeconds: 30
      volumes:
      - name: varlog
        nfs:
          server: nfs-ip
          path: /var/log
      - name: varlibdockercontainers
        nfs:
          server: nfs-ip
          path: /var/lib/docker/containers
      - name: datalog
        nfs:
          server: nfs-ip
          path: /data/docker/containers