AlertManager 钉钉报警简单服务示例
alertmanager dingtalk message demo
$ docker run -p 5000:5000 --name -e ROBOT_TOKEN=<钉钉机器人TOKEN> -e ROBOT_SECRET=<钉钉机器人安全SECRET> -e LOG_LEVEL=debug -e PROME_URL=prometheus.local dingtalk-hook -d cnych/alertmanager-dingtalk-hook:v0.3.5
环境变量配置:
- ROBOT_TOKEN:钉钉机器人 TOKEN
- PROME_URL:手动指定跳转后的 Promethues 地址,默认会是 Pod 的地址
- LOG_LEVEL:日志级别,设置成
debug可以看到 AlertManager WebHook 发送的数据,方便调试使用,不需调试可以不设置该环境变量 - ROBOT_SECRET:为钉钉机器人的安全设置密钥,机器人安全设置页面,加签一栏下面显示的 SEC 开头的字符串
第一步建议将钉钉机器人TOKEN创建成Secret资源对象:
$ kubectl create secret generic dingtalk-secret --from-literal=token=<钉钉群聊的机器人TOKEN> --from-literal=secret=<钉钉群聊机器人的SECRET> -n kube-ops secret "dingtalk-secret" created
然后定义Deployment和Service资源对象:(dingtalk-hook.yaml)
apiVersion: apps/v1 kind: Deployment metadata: name: dingtalk-hook namespace: kube-ops spec: selector: matchLabels: app: dingtalk-hook template: metadata: labels: app: dingtalk-hook spec: containers: - name: dingtalk-hook image: cnych/alertmanager-dingtalk-hook:v0.3.6 imagePullPolicy: IfNotPresent ports: - containerPort: 5000 name: http env: - name: PROME_URL value: prometheus.local - name: LOG_LEVEL value: debug - name: ROBOT_TOKEN valueFrom: secretKeyRef: name: dingtalk-secret key: token - name: ROBOT_SECRET valueFrom: secretKeyRef: name: dingtalk-secret key: secret resources: requests: cpu: 50m memory: 100Mi limits: cpu: 50m memory: 100Mi --- apiVersion: v1 kind: Service metadata: name: dingtalk-hook namespace: kube-ops spec: selector: app: dingtalk-hook ports: - name: hook port: 5000 targetPort: http
直接创建上面的资源对象即可:
$ kubectl create -f dingtalk-hook.yaml deployment.apps "dingtalk-hook" created service "dingtalk-hook" created $ kubectl get pods -n kube-ops NAME READY STATUS RESTARTS AGE dingtalk-hook-c4fcd8cd6-6r2b6 1/1 Running 0 45m ......
最后在AlertManager中 webhook 地址直接通过 DNS 形式访问即可:
receivers: - name: 'webhook' webhook_configs: - url: 'http://dingtalk-hook.kube-ops.svc.cluster.local:5000' send_resolved: true