{"id":35712,"date":"2023-01-05T04:36:28","date_gmt":"2024-01-31T15:00:56","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/"},"modified":"2024-04-29T08:35:50","modified_gmt":"2024-04-29T00:35:50","slug":"%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/","title":{"rendered":"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427"},"content":{"rendered":"<p>\u6211\u5c1d\u8bd5\u4f7f\u7528Splunk\u5c06\u5728Kubernetes\u4e0a\u8fd0\u884c\u7684\u5bb9\u5668\u73af\u5883\u53ef\u89c6\u5316\u3002<br \/>\n\u9996\u5148\uff0c\u6211\u5c06\u4ecb\u7ecd\u6570\u636e\u83b7\u53d6\u7684\u65b9\u6cd5\u5e76\u5199\u4e00\u7bc7\u6587\u7ae0\u3002<\/p>\n<p>\u6211\u60f3\u8981\u5c06\u5176\u7cfb\u5217\u5316\uff0c\u5e76\u5199\u4e00\u7bc7\u5173\u4e8e\u53ef\u89c6\u5316\u548c\u76d1\u63a7\u7684\u6587\u7ae0\u3002<\/p>\n<p>&#8212; 2018\/07\/09 \u8ffd\u8a18 &#8212;<br \/>\n\u6211\u5df2\u7ecf\u64b0\u5199\u4e86\u4e00\u7bc7\u5173\u4e8e\u53ef\u89c6\u5316\u548c\u76d1\u63a7\u7684\u6587\u7ae0\uff0c\u4f7f\u7528Splunk\u6765\u53ef\u89c6\u5316\u548c\u76d1\u63a7Kubernetes\u96c6\u7fa4\u73af\u5883\u7684\u65e5\u5fd7\u548c\u6307\u6807\u3002<\/p>\n<h1>\u9996\u5148<\/h1>\n<p>Splunk\u7d22\u5f15\u7684\u6570\u636e\u5927\u81f4\u53ef\u4ee5\u5206\u4e3a\u4ee5\u4e0b\u56db\u79cd\u7c7b\u578b\u3002<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>CPU\u548c\u5185\u5b58\u7b49\u8d44\u6e90\u4f7f\u7528\u60c5\u51b5\u7684\u5ea6\u91cf<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\u8282\u70b9\u3001Pod\u3001Service\u3001Namespace\u7b49\u5bf9\u8c61\u4fe1\u606f<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>Kubelet\u3001\u4ee3\u7406\u3001API\u670d\u52a1\u5668\u7684\u65e5\u5fd7<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>\u5bb9\u5668\u7684\u65e5\u5fd7<\/ol>\n<h1>\u73af\u5883\u51c6\u5907<\/h1>\n<p>\u63a5\u4e0b\u6765\u662f\u73af\u5883\u51c6\u5907\u3002<\/p>\n<h2>Splunk\u73af\u5883<\/h2>\n<p>\u64cd\u4f5c\u7cfb\u7edf\uff1a\u4e9a\u9a6c\u900aEC2\u4e0a\u7684Amazon Linux<br \/>\nSplunk Enterprise 7.1.1<\/p>\n<p>\u4ee5\u4e0b\u662f\u6211\u4f7f\u7528\u7684\u5e94\u7528\u7a0b\u5e8f\uff1a<br \/>\nSplunk Add-on for Kubernetes v1.0.0<br \/>\nhttps:\/\/splunkbase.splunk.com\/app\/3976\/<br \/>\n\u5b83\u53ea\u5305\u542b\u4e0ek8s\u76f8\u5173\u7684\u8d44\u6e90\u7c7b\u578b\u548c\u6700\u57fa\u672c\u7684\u914d\u7f6e\u3002<br \/>\n\u7531\u4e8e\u6ca1\u6709\u5305\u542b\u4eea\u8868\u677f\uff0c\u6240\u4ee5\u6211\u6253\u7b97\u81ea\u5df1\u521b\u5efa\u4e00\u4e2a\u3002<\/p>\n<p>Splunk\u5206\u6790\u5de5\u4f5c\u533av0.18.4\u6d4b\u8bd5\u7248<br \/>\nhttps:\/\/splunkbase.splunk.com\/app\/3976\/<br \/>\n\u5373\u4f7f\u8fd8\u5904\u4e8e\u6d4b\u8bd5\u7248\uff0c\u4f46\u53ef\u4ee5\u901a\u8fc7\u7b80\u5355\u7684GUI\u64cd\u4f5c\u5feb\u901f\u521b\u5efa\u6307\u6807\u56fe\u8868\u3002<\/p>\n<p>\u3042\u3068\u3001\u3053\u308c\u3082<br \/>\nSplunk Connect for Kubernetes<br \/>\nhttps:\/\/github.com\/splunk\/splunk-connect-for-kubernetes<br \/>\nKubelet\u3084Kube-Proxy\u306e\u30ed\u30b0\u3001\u30b3\u30f3\u30c6\u30ca\u306e\u30ed\u30b0\u3001Pod\u3084Node\u7b49\u306e\u30e1\u30c8\u30ea\u30af\u30b9\u3092\u81ea\u52d5\u7684\u306b\u53d6\u5f97\u3057\u3066Splunk\u306b\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3057\u3066\u304f\u308c\u308b\u4ee3\u7269\u3067\u3059\u3002<br \/>\nYAML\u3067\u8a2d\u5b9a\u4f5c\u3063\u3066 kubectl \u4f7f\u3063\u3066Kubernetes\u30af\u30e9\u30b9\u30bf\u30fc\u74b0\u5883\u306b\u30c7\u30d7\u30ed\u30a4\u3057\u307e\u3059\u3002<\/p>\n<p>\u8fde\u63a5\u5668\u4f7f\u7528\u6570\u636e\u83b7\u53d6\u7684Pod\uff0c\u901a\u8fc7fluentd\u5c06\u6570\u636e\u901a\u8fc7POST\u65b9\u5f0f\u53d1\u9001\u5230Splunk\u7684HTTP Event Collector\u7ec8\u7aef\u70b9\u3002<\/p>\n<h2>Kubernetes\u73af\u5883<\/h2>\n<p>\u8fd9\u6b21\u6211\u4eec\u4f7f\u7528 Heptio \u7684 CloudFormation \u6a21\u677f\u5728 AWS \u4e0a\u6784\u5efa\u4e86\u4e00\u4e2a\u9a8c\u8bc1\u73af\u5883\u3002<\/p>\n<p>\u64cd\u4f5c\u7cfb\u7edf\uff1aUbuntu 16.04.4 LTS<br \/>\nKubelet \u7248\u672c\uff1av1.10.3<\/p>\n<p>\u6211\u4eec\u662f\u4ee5Master x 1 \/ Node x 2\u7684\u67b6\u6784\u6784\u5efa\u7684\u3002<\/p>\n<h1>\u65af\u666e\u6717\u514b\u8bbe\u7f6e<\/h1>\n<p>Splunk\u306e\u8a2d\u5b9a\u81ea\u4f53\u306f\u30ab\u30f3\u30bf\u30f3<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>App\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u4f5c\u6210<\/ol>\n<\/li>\n<\/ol>\n<p>&nbsp;<\/p>\n<ol>HEC\u3092\u6709\u52b9\u306b\u3059\u308b<\/ol>\n<p>\u5c31\u53ea\u662f\u8fd9\u6837\u800c\u5df2\u3002<\/p>\n<h2>Spkunk\u306bApp\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h2>\n<p>Let&#8217;s install the Splunk Add-on for Kubernetes and Splunk Analysis Workspace. \u8ba9\u6211\u4eec\u5b89\u88c5Splunk\u7684Kubernetes\u9644\u52a0\u7ec4\u4ef6\u548cSplunk\u5206\u6790\u5de5\u4f5c\u533a\u3002<\/p>\n<h2>\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u4f5c\u6210<\/h2>\n<p>\u30ed\u30b0\u7cfb\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3068\u30e1\u30c8\u30ea\u30af\u30b9\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3092\u4f5c\u308a\u307e\u3059\u3002<br \/>\n\u30e1\u30c8\u30ea\u30af\u30b9\u306f\u5f93\u6765\u306e\u30ed\u30b0\u7528\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3068\u306f\u5225\u306b\u4fdd\u5b58\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u305f\u3081\u3001\u5225\u3005\u306b\u4f5c\u308a\u307e\u3059\u3002<\/p>\n<p>\u987a\u4fbf\u63d0\u4e00\u4e0b\uff0c\u6700\u597d\u6309\u7167\u96c6\u7fa4\u7684\u5355\u4f4d\u6765\u521b\u5efa\u7d22\u5f15\u3002<\/p>\n<p>\u5728Splunk\u754c\u9762\u4e2d\uff0c\u8f6c\u5230\u201c\u8bbe\u7f6e\u201d&gt;\u201c\u7d22\u5f15\u201d\u3002<br \/>\n\u521b\u5efa\u65b0\u7d22\u5f15\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/28-0.png\" alt=\"Screen Shot 2018-06-22 4.04.42 PM.png\" \/><\/div>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/29-0.png\" alt=\"Screen Shot 2018-06-22 4.05.48 PM.png\" \/><\/div>\n<h2>\u4f7fHEC\u751f\u6548<\/h2>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/31-0.png\" alt=\"Screen Shot 2018-06-22 4.09.02 PM.png\" \/><\/div>\n<p>\u4f7f\u7528\u4e00\u4e2aHEC\u4ee3\u5e01\u5373\u53ef\u83b7\u5f97\u65e5\u5fd7\u548c\u6307\u6807\u4e24\u8005\u7684\u6536\u76ca\u3002<br \/>\n\u56e0\u6b64\uff0c\u53ea\u9700\u521b\u5efa\u4e00\u4e2a\u4ee3\u5e01\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/33-0.png\" alt=\"Screen Shot 2018-06-22 4.12.25 PM.png\" \/><\/div>\n<p>\u8bf7\u524d\u5f80\u4e0b\u4e00\u6b65\uff0c\u6307\u5b9a\u6e90\u7c7b\u578b\u548c\u7d22\u5f15\u3002<\/p>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/35-0.png\" alt=\"Screen Shot 2018-06-22 4.12.44 PM.png\" \/><\/div>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/36-0.png\" alt=\"Screen Shot 2018-06-22 4.14.49 PM.png\" \/><\/div>\n<p>Splunk\u7684\u8bbe\u7f6e\u5df2\u7ecf\u5b8c\u6210\u4e86\u3002<\/p>\n<h1>Kubernetes\u7684\u914d\u7f6e<\/h1>\n<h2>\u521b\u5efaKubernetes\u96c6\u7fa4<\/h2>\n<p>\u6211\u4f7f\u7528Heptio\u5728AWS\u4e0a\u8fdb\u884c\u4e86\u90e8\u7f72\uff0c\u6839\u636e\u6a21\u677f\u4f7f\u7528CloudFormation\u8fdb\u884c\u96c6\u7fa4\u521b\u5efa\uff08\u8be6\u7ec6\u5185\u5bb9\u7701\u7565\uff09\u3002<\/p>\n<h2>\u672c\u5730\u51c6\u5907<\/h2>\n<p>\u5c06kubectl\u548chelm\u5b89\u88c5\u5230\u672c\u5730\u7ec8\u7aef\uff08Mac\uff09\u4e0a\u3002<br \/>\n\u8fd9\u6837\u5c31\u53ef\u4ee5\u5728\u672c\u5730\u800c\u65e0\u9700\u901a\u8fc7SSH\u767b\u5f55\uff0c\u8fdb\u884cKubernetes\u64cd\u4f5c\u3002<\/p>\n<h3>kubectl \u5b89\u88c5<\/h3>\n<p>\u9996\u5148\u4f7f\u7528brew\u547d\u4ee4\u5b89\u88c5kubectl\uff08\u53c2\u8003\uff1aKubernetes\u6587\u6863\uff09\u3002<\/p>\n<pre class=\"post-pre\"><code>brew <span class=\"nb\">install <\/span>kubectl\r\n<\/code><\/pre>\n<p>\u63a5\u4e0b\u6765\uff0c\u4ece\u4e4b\u524d\u6240\u521b\u5efa\u7684Heptio Kubernetes\u4e2d\u4e0b\u8f7dkubeconfig\u6587\u4ef6\uff0c<br \/>\n\u7136\u540e\u521b\u5efa\u4e00\u4e2a\u9002\u7528\u4e8eKubernetes\u7684\u6587\u4ef6\u5939\u5e76\u5c06\u5176\u653e\u5165\u5176\u4e2d\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">SSH_KEY<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"&lt;path\/to\/varMyKey.pem&gt;\"<\/span><span class=\"p\">;<\/span> scp <span class=\"nt\">-i<\/span> <span class=\"nv\">$SSH_KEY<\/span> <span class=\"nt\">-o<\/span> <span class=\"nv\">ProxyCommand<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"ssh -i <\/span><span class=\"se\">\\\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">SSH_KEY<\/span><span class=\"k\">}<\/span><span class=\"se\">\\\"<\/span><span class=\"s2\"> ubuntu@&lt;BastionHostPublicIP&gt; nc %h %p\"<\/span> ubuntu@&lt;MasterPrivateIP&gt;:~\/kubeconfig .\/kubeconfig\r\n<\/code><\/pre>\n<p>\u8bbe\u7f6e\u5c06\u4e0b\u8f7d\u7684kubeconfig\u6587\u4ef6\u8bbe\u4e3a\u73af\u5883\u53d8\u91cf\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nb\">export <\/span><span class=\"nv\">KUBECONFIG<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">pwd<\/span><span class=\"si\">)<\/span>\/kubeconfig\r\n<\/code><\/pre>\n<p>\u8a66\u3057\u306bNode\u53d6\u5f97<br \/>\n\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306fkubeconfig\u7f6e\u3044\u3066\u3042\u308b\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3067\u5b9f\u884c\u3059\u3079\u3057<\/p>\n<pre class=\"post-pre\"><code>kubectl get nodes\r\n<\/code><\/pre>\n<h3>\u5b89\u88c5helm<\/h3>\n<p>helm \u662f\u5728 Kubernetes \u4e0a\u7528\u4e8e\u5305\u7ba1\u7406\u7684\u5de5\u5177\uff0c\u7c7b\u4f3c\u4e8e yum\u3002<\/p>\n<p>\u4f7f\u7528brew\u6765\u5b89\u88c5Helm\uff08\u53c2\u8003\uff1aHelm\u6587\u6863\uff09<\/p>\n<pre class=\"post-pre\"><code>brew <span class=\"nb\">install <\/span>kubernetes-helm\r\n<\/code><\/pre>\n<p>\u8bf7\u786e\u8ba4Helm\u7248\u672c\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm version\r\nClient: &amp;version.Version<span class=\"o\">{<\/span>SemVer:<span class=\"s2\">\"v2.9.1\"<\/span>, GitCommit:<span class=\"s2\">\"20adb27c7c5868466912eebdf6664e7390ebe710\"<\/span>, GitTreeState:<span class=\"s2\">\"clean\"<\/span><span class=\"o\">}<\/span>\r\nServer: &amp;version.Version<span class=\"o\">{<\/span>SemVer:<span class=\"s2\">\"v2.9.1\"<\/span>, GitCommit:<span class=\"s2\">\"20adb27c7c5868466912eebdf6664e7390ebe710\"<\/span>, GitTreeState:<span class=\"s2\">\"clean\"<\/span><span class=\"o\">}<\/span>\r\n<\/code><\/pre>\n<p>\u30d0\u30fc\u30b8\u30e7\u30f3\u306f\u5f8c\u3067\u4f7f\u3046\u306e\u3067\u30e1\u30e2\u3057\u3066\u304a\u304d\u307e\u3057\u3087\u3046\u3002<\/p>\n<h2>Splunk Connect for Kubernetes\u7684\u914d\u7f6e\u3002<\/h2>\n<p>\u7ec8\u4e8e\u6765\u5230\u6b63\u9898\u4e86\u3002<\/p>\n<h3>\u5b89\u88c5 Tiller<\/h3>\n<p>\u4e3a\u5b9e\u73b0Kubernetes\u7684\u57fa\u4e8eRBAC\u7684\u8bbf\u95ee\u63a7\u5236\uff0c\u9700\u8981\u521b\u5efaTiller\u6765\u5141\u8bb8\u4f7f\u7528Helm\u5de5\u5177\u3002<\/p>\n<p>\u521b\u5efa\u7528\u4e8e\u5b89\u88c5Splunk Connect for Kubernetes\u7684\u547d\u540d\u7a7a\u95f4\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl create ns splunk-connect-k8s\r\n<\/code><\/pre>\n<p>\u63a5\u4e0b\u6765\u662fTiller\u7684YAML\u6587\u4ef6\u5728\u8fd9\u91cc\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\"># https:\/\/docs.helm.sh\/using_helm\/#example-service-account-with-cluster-admin-role<\/span>\r\n\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ServiceAccount<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">tiller<\/span>\r\n  <span class=\"na\">namespace<\/span><span class=\"pi\">:<\/span> <span class=\"s\">splunk-connect-k8s<\/span>\r\n  <span class=\"c1\">#namespace: kube-system<\/span>\r\n  <span class=\"c1\">#namespace: default<\/span>\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">rbac.authorization.k8s.io\/v1beta1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ClusterRoleBinding<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">tiller<\/span>\r\n  <span class=\"c1\">#namespace: kube-system<\/span>\r\n<span class=\"na\">roleRef<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">apiGroup<\/span><span class=\"pi\">:<\/span> <span class=\"s\">rbac.authorization.k8s.io<\/span>\r\n  <span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ClusterRole<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">cluster-admin<\/span>\r\n<span class=\"na\">subjects<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ServiceAccount<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">tiller<\/span>\r\n    <span class=\"na\">namespace<\/span><span class=\"pi\">:<\/span> <span class=\"s\">splunk-connect-k8s<\/span>\r\n    <span class=\"c1\">#namespace: kube-system<\/span>\r\n    <span class=\"c1\">#namespace: default<\/span>\r\n<\/code><\/pre>\n<p>\u8ba9\u6211\u4eec\u8bd5\u7740\u5236\u4f5c\u8015\u7281\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl create <span class=\"nt\">-f<\/span> tiller.yaml\r\n<\/code><\/pre>\n<h3>Helm\u521d\u59cb\u5316<\/h3>\n<p>\u4f7f\u7528`helm init`\u8fdb\u884c\u521d\u59cb\u8bbe\u7f6e\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm init <span class=\"nt\">--service-account<\/span> tiller <span class=\"nt\">--tiller-namespace<\/span> splunk-connect-k8s <span class=\"nt\">--upgrade<\/span> <span class=\"nt\">-i<\/span> registry.cn-hangzhou.aliyuncs.com\/google_containers\/tiller:v2.9.1 <span class=\"nt\">--stable-repo-url<\/span> https:\/\/kubernetes.oss-cn-hangzhou.aliyuncs.com\/charts\r\n<span class=\"nv\">$HELM_HOME<\/span> has been configured at \/Users\/splunk\/.helm.\r\n\r\nTiller <span class=\"o\">(<\/span>the Helm server-side component<span class=\"o\">)<\/span> has been installed into your Kubernetes Cluster.\r\n\r\nPlease note: by default, Tiller is deployed with an insecure <span class=\"s1\">'allow unauthenticated users'<\/span> policy.\r\nFor more information on securing your installation see: https:\/\/docs.helm.sh\/using_helm\/#securing-your-helm-installation\r\nHappy Helming!\r\n<\/code><\/pre>\n<p>\u8bf7\u7528\u60a8\u5f53\u524d\u7684Helm\u7248\u672c\u66ff\u63622.9.1\u8fd9\u90e8\u5206\u3002<\/p>\n<p>\u786e\u8ba4\u662f\u5426\u5df2\u521b\u5efa\u4e86 tiller \u670d\u52a1\u8d26\u6237\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get sa <span class=\"nt\">-n<\/span> splunk-connect-k8s\r\nNAME      SECRETS   AGE\r\ndefault   1         1d\r\ntiller    1         1d\r\n<\/code><\/pre>\n<h3>\u8fde\u63a5Kubernetes\u7684\u8bbe\u7f6e\u548c\u5b89\u88c5<\/h3>\n<p>\u5728Splunk\u7684\u5b98\u65b9GitHub\u4e0a\uff0c\u63d0\u4f9b\u4e86\u5305\u542b\u56fe\u8868\u6a21\u677f\u548c\u53d8\u91cf\u8bbe\u7f6e\u793a\u4f8b\u7684\u6837\u672c\u3002<br \/>\nhttps:\/\/github.com\/splunk\/splunk-connect-for-kubernetes\/tree\/master\/helm-chart<\/p>\n<p>splunk-kubernetes-logging \u306f\u30b3\u30f3\u30c6\u30ca\u3084k8s\u95a2\u9023\u306e\u30ed\u30b0<br \/>\nsplunk-kubernetes-metrics \u306fNode\u3084Pod\u306e\u30e1\u30c8\u30ea\u30af\u30b9<br \/>\nsplunk-kubernetes-objects \u306fk8s\u95a2\u9023\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u306e\u8a73\u7d30\u60c5\u5831<\/p>\n<p>\u3053\u3061\u3089\u306eYAML\u3092\u4f7f\u3063\u3066 Splunk Connect for Kubernetes \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c1\">#global settings<\/span>\r\n<span class=\"na\">global<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">logLevel<\/span><span class=\"pi\">:<\/span> <span class=\"s\">info<\/span>\r\n  <span class=\"na\">splunk<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">hec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">protocol<\/span><span class=\"pi\">:<\/span> <span class=\"s\">https<\/span>\r\n      <span class=\"na\">insecureSSL<\/span><span class=\"pi\">:<\/span> <span class=\"no\">false<\/span>\r\n      <span class=\"na\">host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">splunk_hec_endpoint_hostname<\/span>\r\n      <span class=\"na\">token<\/span><span class=\"pi\">:<\/span> <span class=\"s\">XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX<\/span>\r\n\r\n<span class=\"c1\">#local config for logging chart<\/span>\r\n<span class=\"na\">splunk-kubernetes-logging<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">journalLogPath<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/run\/log\/journal<\/span>\r\n  <span class=\"na\">splunk<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">hec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">indexName<\/span><span class=\"pi\">:<\/span> <span class=\"s\">k8s_events<\/span>\r\n\r\n<span class=\"c1\">#local config for objects chart      <\/span>\r\n<span class=\"na\">splunk-kubernetes-objects<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">rbac<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">create<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">serviceAccount<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">create<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">splunk-kubernetes-objects<\/span>\r\n  <span class=\"na\">kubernetes<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">insecureSSL<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">objects<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">core<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">v1<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">pods<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">namespaces<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">nodes<\/span>\r\n          <span class=\"c1\">#interval: 60<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">services<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">config_maps<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">secrets<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"c1\">#- name: volumes<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">persistent_volumes<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">service_accounts<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">persistent_volume_claims<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">resource_quotas<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">component_statuses<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">events<\/span>\r\n          <span class=\"na\">mode<\/span><span class=\"pi\">:<\/span> <span class=\"s\">watch<\/span>\r\n    <span class=\"na\">apps<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">v1<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">deployments<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">daemon_sets<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">replica_sets<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">stateful_sets<\/span>\r\n          <span class=\"c1\">#interval: 30<\/span>\r\n  <span class=\"na\">splunk<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">hec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">indexName<\/span><span class=\"pi\">:<\/span> <span class=\"s\">k8s_events<\/span>    \r\n\r\n<span class=\"c1\">#local config for metrics chart<\/span>\r\n<span class=\"na\">splunk-kubernetes-metrics<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">rbac<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">create<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n  <span class=\"na\">serviceAccount<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">create<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n    <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">splunk-kubernetes-metrics<\/span>\r\n  <span class=\"na\">splunk<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">hec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">indexName<\/span><span class=\"pi\">:<\/span> <span class=\"s\">k8s_metrics<\/span>\r\n<\/code><\/pre>\n<p>splunk_hec_endpoint_hostname \u306fSplunk\u3067HEC\u3092\u53d7\u3051\u308b\u30db\u30b9\u30c8\u540d\uff08\u3082\u3057\u304f\u306fFQDN\u3084IP\u30a2\u30c9\u30ec\u30b9\uff09<br \/>\nXXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX \u306f\u5148\u306e\u30b9\u30c6\u30c3\u30d7\u3067\u4f5c\u6210\u3057\u305fHEC\u30c8\u30fc\u30af\u30f3\u3092\u6307\u5b9a<\/p>\n<p>indexName \u306b\u306f\u4f5c\u6210\u3057\u305f\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u540d\u3092\u6307\u5b9a<br \/>\nsplunk-kubernetes-logging \u3068 splunk-kubernetes-objects \u306f\u30ed\u30b0\u7528\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9 \uff08\u3053\u3053\u3067\u306f k8s_events\uff09<br \/>\n-splunk-kubernetes-metrics \u306f\u30e1\u30c8\u30ea\u30af\u30b9\u7528\u306e\u30a4\u30f3\u30c7\u30c3\u30af\u30b9 \uff08\u3053\u3053\u3067\u306f k8s_metrics\uff09<\/p>\n<p>helm install \u3067\u5909\u6570\u8a2d\u5b9a\u3057\u305fYAML\u3092\u4f7f\u3063\u3066 Splunk Connect for Kubernetes \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm <span class=\"nb\">install<\/span> <span class=\"nt\">--name<\/span> kikeyama <span class=\"nt\">-f<\/span> my_values.yaml <span class=\"nt\">--namespace<\/span> splunk-connect-k8s <span class=\"nt\">--tiller-namespace<\/span> splunk-connect-k8s https:\/\/github.com\/splunk\/splunk-connect-for-kubernetes\/releases\/download\/v1.0.0\/splunk-connect-for-kubernetes-1.0.0.tgz\r\nNAME:   kikeyama\r\nLAST DEPLOYED: Tue Jun 19 23:08:56 2018\r\nNAMESPACE: splunk-connect-k8s\r\nSTATUS: DEPLOYED\r\n\r\nRESOURCES:\r\n<span class=\"o\">==&gt;<\/span> v1\/ServiceAccount\r\nNAME                       SECRETS  AGE\r\nsplunk-kubernetes-metrics  1        4s\r\nsplunk-kubernetes-objects  1        4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1\/ClusterRole\r\nNAME                                AGE\r\nkikeyama-splunk-kubernetes-objects  4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1\/ClusterRoleBinding\r\nNAME                                AGE\r\nkikeyama-splunk-kubernetes-metrics  4s\r\nkikeyama-splunk-kubernetes-objects  4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1beta1\/DaemonSet\r\nNAME                                DESIRED  CURRENT  READY  UP-TO-DATE  AVAILABLE  NODE SELECTOR  AGE\r\nkikeyama-splunk-kubernetes-logging  3        3        0      3           0          &lt;none&gt;         4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1beta1\/Deployment\r\nNAME                                DESIRED  CURRENT  UP-TO-DATE  AVAILABLE  AGE\r\nkikeyama-splunk-kubernetes-metrics  1        1        1           0          4s\r\nkikeyama-splunk-kubernetes-objects  1        1        1           0          4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1\/Pod<span class=\"o\">(<\/span>related<span class=\"o\">)<\/span>\r\nNAME                                                 READY  STATUS             RESTARTS  AGE\r\nkikeyama-splunk-kubernetes-logging-bl8q5             0\/1    ContainerCreating  0         4s\r\nkikeyama-splunk-kubernetes-logging-vqls4             0\/1    ContainerCreating  0         4s\r\nkikeyama-splunk-kubernetes-logging-xt7b4             0\/1    ContainerCreating  0         4s\r\nkikeyama-splunk-kubernetes-metrics-8695547795-kj62z  0\/2    ContainerCreating  0         4s\r\nkikeyama-splunk-kubernetes-objects-7b89c55dc8-7pnht  0\/1    ContainerCreating  0         4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1\/Secret\r\nNAME                                TYPE    DATA  AGE\r\nkikeyama-splunk-kubernetes-logging  Opaque  1     4s\r\nkikeyama-splunk-kubernetes-metrics  Opaque  1     4s\r\nkikeyama-splunk-kubernetes-objects  Opaque  1     4s\r\n\r\n<span class=\"o\">==&gt;<\/span> v1\/ConfigMap\r\nNAME                                DATA  AGE\r\nkikeyama-splunk-kubernetes-logging  7     4s\r\nkikeyama-splunk-kubernetes-metrics  1     4s\r\nkikeyama-splunk-kubernetes-objects  1     4s\r\n\r\n\r\nNOTES:\r\n\r\n\r\n\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557     \u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2557  \u2588\u2588\u2557\u2588\u2588\u2557    \r\n\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255d\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2551 \u2588\u2588\u2554\u255d\u255a\u2588\u2588\u2557   \r\n\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2554\u255d  \u255a\u2588\u2588\u2557  \r\n\u255a\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u255d \u2588\u2588\u2551     \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2551\u255a\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2588\u2588\u2557  \u2588\u2588\u2554\u255d  \r\n\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551     \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255a\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255d\u2588\u2588\u2551 \u255a\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2557\u2588\u2588\u2554\u255d\r\n\u255a\u2550\u2550\u2550\u2550\u2550\u2550\u255d\u255a\u2550\u255d     \u255a\u2550\u2550\u2550\u2550\u2550\u2550\u255d \u255a\u2550\u2550\u2550\u2550\u2550\u255d \u255a\u2550\u255d  \u255a\u2550\u2550\u2550\u255d\u255a\u2550\u255d  \u255a\u2550\u255d\u255a\u2550\u255d\r\n\r\nListen to your data.\r\n\r\nSplunk Connect <span class=\"k\">for <\/span>Kubernetes is spinning up <span class=\"k\">in <\/span>your cluster.\r\nAfter a few minutes, you should see data being indexed <span class=\"k\">in <\/span>your Splunk.\r\n\r\nIf you get stuck, we<span class=\"s1\">'re here to help.\r\nLook for answers here: http:\/\/docs.splunk.com\r\n<\/span><\/code><\/pre>\n<p>\u8bf7\u5c06\u201ckikeyama\u201d\u4e00\u8bcd\u66ff\u6362\u4e3a\u60a8\u81ea\u5df1\u559c\u6b22\u7684\u540d\u5b57\u3002<br \/>\n\u8fd9\u5c06\u6210\u4e3aPod\u540d\u79f0\u7684\u524d\u7f00\u3002<\/p>\n<h3>\u78ba\u8a8d<\/h3>\n<p>Splunk Connect for Kubernetes\u7684Pod\u5df2\u88ab\u521b\u5efa\u5982\u4e0b\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>kubectl get pods <span class=\"nt\">-n<\/span> splunk-connect-k8s\r\nNAME                                                  READY     STATUS    RESTARTS   AGE\r\nkikeyama-splunk-kubernetes-logging-bl8q5              1\/1       Running   0          2d\r\nkikeyama-splunk-kubernetes-logging-vqls4              1\/1       Running   0          2d\r\nkikeyama-splunk-kubernetes-logging-xt7b4              1\/1       Running   0          2d\r\nkikeyama-splunk-kubernetes-metrics-8695547795-kj62z   2\/2       Running   0          2d\r\nkikeyama-splunk-kubernetes-objects-7b89c55dc8-7pnht   1\/1       Running   0          2d\r\ntiller-deploy-7f9d844969-wns69                        1\/1       Running   0          2d\r\n<\/code><\/pre>\n<h1>The correct paraphrase in Chinese would be: &#8220;\u65af\u67cf\u6797\u514b\u786e\u8ba4&#8221; (S\u012b b\u00f3 k\u00e8 .<\/h1>\n<p>Splunk\u306b\u30ed\u30b0\u30a4\u30f3\u3057\u3066\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n<h2>\u67e5\u770b\u65e5\u5fd7<\/h2>\n<p>\u8ba9\u6211\u4eec\u6765\u770b\u770b\u4ee5\u4e0bSPL\u662f\u5426\u5305\u542b\u65e5\u5fd7\u3002<\/p>\n<pre class=\"post-pre\"><code>| tstats count latest(_time) as latest_time where index=k8s_events by index sourcetype \r\n| eval latest_time = strftime(latest_time, \"%F %T\")\r\n<\/code><\/pre>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/93-0.png\" alt=\"Screen Shot 2018-06-22 5.50.37 PM.png\" \/><\/div>\n<h2>\u786e\u8ba4\u6307\u6807<\/h2>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/95-0.png\" alt=\"Screen Shot 2018-06-22 5.54.03 PM.png\" \/><\/div>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/96-0.png\" alt=\"kubernetes_metrics_by_pod.png\" \/><\/div>\n<h1>\u6700\u5f8c\u306b<\/h1>\n<p>\u3053\u308c\u3067\u30c7\u30fc\u30bf\u306f\u5165\u3063\u3066\u304d\u307e\u3059\u304c\u3001\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u7b49\u306e\u53ef\u8996\u5316\u306fAdd-on\u306b\u7528\u610f\u3055\u308c\u3066\u3044\u306a\u3044\u306e\u3067\u3001\u81ea\u4f5c\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<br \/>\n\u307e\u305f\u3001 Splunk Add-on for Kubernetes \u306fSplunk\u88fd\u306a\u306e\u3067\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u308b\u3063\u307d\u3044\u3067\u3059\u304c\u3001 Splunk Connect for Kubernetes \u306fGitHub\u306b\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u306e\u307f\u3067\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u30b5\u30dd\u30fc\u30c8\u306b\u306a\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n<p>\u3061\u306a\u307f\u306b\u3001\u81ea\u5206\u3067\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u305f\u3068\u304d\u306f helm install \u5b9f\u884c\u6642\u306bRBAC\u3067\u3072\u3063\u304b\u304b\u3063\u305f\u306e\u304b\u3001\u4f55\u56de\u3082permission error\u304c\u51fa\u3066\u82e6\u52b4\u3057\u307e\u3057\u305f\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"nv\">$ <\/span>helm <span class=\"nb\">install<\/span> <span class=\"nt\">--name<\/span> kikeyama <span class=\"nt\">--namespace<\/span> splunk-connect-k8s <span class=\"nt\">-f<\/span> my_values.yaml https:\/\/github.com\/splunk\/splunk-connect-for-kubernetes\/releases\/download\/v1.0.0\/splunk-connect-for-kubernetes-1.0.0.tgz\r\nError: release kikeyama failed: namespaces <span class=\"s2\">\"splunk-connect-k8s\"<\/span> is forbidden: User <span class=\"s2\">\"system:serviceaccount:kube-system:default\"<\/span> cannot get namespaces <span class=\"k\">in <\/span>the namespace <span class=\"s2\">\"splunk-connect-k8s\"<\/span>\r\n<\/code><\/pre>\n<p>\u3053\u3061\u3089 \u3092\u53c2\u8003\u306b helm init \u3057\u306a\u304a\u3057\u305f\u3089\u4e0a\u624b\u304f\u3044\u304d\u307e\u3057\u305f\u3002<\/p>\n<p>\u9664\u4e86\u5176\u4ed6\u9ebb\u7169\u4e4b\u5916\uff0c\u6309\u7167\u4e0a\u8ff0\u6b65\u9a5f\u61c9\u8a72\u662f\u53ef\u4ee5\u7684\u3002\u5f88\u7c21\u55ae\u5427\uff1f<\/p>\n<h1>\u304a\u307e\u3051<\/h1>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/104-0.png\" alt=\"kubernetes_overview_20180622.png\" \/><\/div>\n<p>\u5173\u4e8e\u8fd9\u4e2a\u95ee\u9898\uff0c\u7a0d\u540e\u4f1a\u5728\u53e6\u4e00\u7bc7\u6587\u7ae0\u4e2d\u63d0\u53ca\u3002<\/p>\n<p>\u6211\u5b89\u88c5\u4e86Nginx Ingress\u5e76\u5c06\u65e5\u5fd7\u5bfc\u5165Splunk\u4e2d\uff0c\u6240\u4ee5\u7a0d\u540e\u53ef\u80fd\u4f1a\u5199\u4e00\u7bc7\u76f8\u5173\u6587\u7ae0\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6211\u5c1d\u8bd5\u4f7f\u7528Splunk\u5c06\u5728Kubernetes\u4e0a\u8fd0\u884c\u7684\u5bb9\u5668\u73af\u5883\u53ef\u89c6\u5316\u3002 \u9996\u5148\uff0c\u6211\u5c06\u4ecb\u7ecd\u6570\u636e\u83b7\u53d6\u7684\u65b9\u6cd5\u5e76\u5199\u4e00\u7bc7\u6587 [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-35712","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u8ba9\u6211\u4eec\u4f7f\u7528splunk\u6765\u76d1\u63a7kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\" \/>\n<meta property=\"og:description\" content=\"\u6211\u5c1d\u8bd5\u4f7f\u7528Splunk\u5c06\u5728Kubernetes\u4e0a\u8fd0\u884c\u7684\u5bb9\u5668\u73af\u5883\u53ef\u89c6\u5316\u3002 \u9996\u5148\uff0c\u6211\u5c06\u4ecb\u7ecd\u6570\u636e\u83b7\u53d6\u7684\u65b9\u6cd5\u5e76\u5199\u4e00\u7bc7\u6587 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u8ba9\u6211\u4eec\u4f7f\u7528splunk\u6765\u76d1\u63a7kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-31T15:00:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T00:35:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/28-0.png\" \/>\n<meta name=\"author\" content=\"\u96c5, \u609f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u96c5, \u609f\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/\",\"name\":\"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2024-01-31T15:00:56+00:00\",\"dateModified\":\"2024-04-29T00:35:50+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6\",\"name\":\"\u96c5, \u609f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g\",\"caption\":\"\u96c5, \u609f\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u8ba9\u6211\u4eec\u4f7f\u7528splunk\u6765\u76d1\u63a7kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427","og_description":"\u6211\u5c1d\u8bd5\u4f7f\u7528Splunk\u5c06\u5728Kubernetes\u4e0a\u8fd0\u884c\u7684\u5bb9\u5668\u73af\u5883\u53ef\u89c6\u5316\u3002 \u9996\u5148\uff0c\u6211\u5c06\u4ecb\u7ecd\u6570\u636e\u83b7\u53d6\u7684\u65b9\u6cd5\u5e76\u5199\u4e00\u7bc7\u6587 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u8ba9\u6211\u4eec\u4f7f\u7528splunk\u6765\u76d1\u63a7kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2024-01-31T15:00:56+00:00","article_modified_time":"2024-04-29T00:35:50+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d249d37434c4406c2f764\/28-0.png"}],"author":"\u96c5, \u609f","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u96c5, \u609f","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/","name":"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2024-01-31T15:00:56+00:00","dateModified":"2024-04-29T00:35:50+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u8ba9\u6211\u4eec\u4f7f\u7528Splunk\u6765\u76d1\u63a7Kubernetes\u7684\u65e5\u5fd7\u548c\u6307\u6807\u5427"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/f044a4b7fa4ee2701702942002419ca6","name":"\u96c5, \u609f","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e71a913e914f1aad1efc391f92084294bac54bc782acd289638580134cf667a6?s=96&d=mm&r=g","caption":"\u96c5, \u609f"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yawu\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e8%ae%a9%e6%88%91%e4%bb%ac%e4%bd%bf%e7%94%a8splunk%e6%9d%a5%e7%9b%91%e6%8e%a7kubernetes%e7%9a%84%e6%97%a5%e5%bf%97%e5%92%8c%e6%8c%87%e6%a0%87%e5%90%a7%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=35712"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35712\/revisions"}],"predecessor-version":[{"id":84192,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/35712\/revisions\/84192"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=35712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=35712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=35712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}