You can use Application Real-Time Monitoring Service (ARMS) to monitor applications that are deployed in Kubernetes clusters. ARMS allows you to monitor applications based on various performance metrics, such as the topology, API requests, abnormal transactions, slow transactions, and SQL analysis. This topic describes how to enable ARMS to monitor an application that is deployed in a Kubernetes cluster.
This topic does not apply to Alibaba Cloud Container Service for Kubernetes (ACK) clusters. For information about how to install an ARMS agent in an ACK cluster, see Automatically install an ARMS agent in ACK.
Prerequisites
The version of the Kubernetes cluster is 1.18 or later.
The cluster is accessible over the Internet, or a network connection is established between an Alibaba Cloud virtual private cloud (VPC) and the cluster by using a Cloud Enterprise Network (CEN) instance.
The version of the JDK is supported by Application Monitoring. For more information, see Java components and frameworks supported by ARMS.
The maximum heap memory of the process is greater than 256 MB.
(Recommended) Method 1: Enable ARMS by using a registered Kubernetes cluster
Benefits of using a registered Kubernetes cluster:
More efficient O&M support.
More scaling capabilities, such as monitoring, logging, backup and restoration, security, and elastic resources on the cloud. For more information, see Overview of registered clusters.
Register a Kubernetes cluster in ACK One. For more information, see Create a registered cluster.
Install an ARMS agent (ack-onepilot component) for the registered Kubernetes cluster. For more information, see Enable ARMS for a registered cluster.
Method 2: Directly enable ARMS
If you use this method to connect the application to ARMS, container information such as the CPU, memory, disk, and network is not displayed. The application instance page displays only the Kubernetes cluster data collected by ARMS, and you cannot view the container data obtained by the Prometheus agent in Managed Service for Prometheus. For more information, see Java application instance monitoring.
Step 1: Install Helm V3
Step 2: Install an ARMS agent
ARMS can monitor only the following two types of applications: Deployment and StatefulSet. To enable ARMS to monitor the Deployment application, perform the following steps.
Run the following
wget
command to download the ack-onepilot installation package.wget 'https://aliacs-app-catalog.oss-cn-hangzhou.aliyuncs.com/charts-incubator/ack-onepilot-3.3.0.tgz'
Run the following command to decompress the installation package.
tar xvf ack-onepilot-3.3.0.tgz
Edit the values.yaml file in the installation package. Modify the following parameters based on your business requirements and save the file.
registry: registry-__ACK_REGION_ID__.ack.aliyuncs.com/acs/ cluster_id: __ACK_CLUSTER_ID__ accessKey: __ACCESSKEY__ accessKeySecret: __ACCESSKEY_SECRET__ uid: "__ACK_UID__" region_id: __ACK_REGION_ID__
registry
: the image address of the ack-onepilot component.cluster_id
: the unique ID of the Kubernetes cluster. We recommend that you specify this parameter in the<uid>-<clusterid>
format.accessKey
andaccessKeySecret
: the AccessKey ID and AccessKey secret of your Alibaba Cloud account. For more information about how to obtain an AccessKey pair, see Create an AccessKey pair.ImportantYou must make sure that the AliyunARMSFullAccess and AliyunSTSAssumeRoleAccess policies are attached to your Alibaba Cloud account.
uid
: the ID of your Alibaba Cloud account. To obtain the ID of your Alibaba Cloud account, move the pointer over the profile picture in the upper-right corner of the Alibaba Cloud Management Console.region_id
: the region ID. For more information about the regions that support Application Monitoring, see Supported regions.
Install the ack-onepilot component.
Run the following command without opening the ack-onepilot installation package.
helm3 upgrade --install ack-onepilot ack-onepilot --namespace ack-onepilot --create-namespace
Step 3: Edit the YAML file of the application
Run the following command to view the YAML file of the Deployment application.
kubectl get deployment {Name of the Deployment application} -o yaml
NoteIf you do not know the
Name of the Deployment application
, run the following command to view all Deployment applications. You can find the required Deployment application in the results. Then, view the YAML file of the application.kubectl get deployments --all-namespace
Run the following command to edit the YAML file of the Deployment application.
kubectl edit deployment {Name of the Deployment application} -o yaml
In the YAML file, add the following content to the spec.template.metadata parameter.
labels: armsPilotAutoEnable: "on" armsPilotCreateAppName: "<your-deployment-name>" # Replace <your-deployment-name> with the actual application name. armsSecAutoEnable: "on" # If you want to connect the application to Application Security, you must configure this parameter.
NoteFor information about Application Security, see What is Application Security?
For information about the billing of Application Security, see Billing.
The following example shows a complete YAML file for creating a Deployment application in a Kubernetes cluster and enabling ARMS to monitor the application.
After the preceding configurations are saved, the application automatically restarts and then the configurations take effect.
After 2 to 5 minutes, if your application is displayed on the ARMS console and specific monitoring data is reported, your application is monitored by ARMS.
page in the