Metricbeat Pod의 Host 정보 가져오기

2025. 2. 9. 08:58k8s/EFK

args: ["-e", "--system.hostfs=/hostfs"] 옵션이 추가 되어야 함

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: metricbeat
  namespace: {namespace}
  labels:
    app: metricbeat
spec:
  #replicas: 1
  selector:
    matchLabels:
      app: metricbeat
  template:
    metadata:
      labels:
        app: metricbeat
    spec:
      # 이게 없으면 다 안됨
      securityContext:
        runAsUser: 0
        runAsGroup: 0
        fsGroup: 0
      containers:
      - name: metricbeat
        image: docker.elastic.co/beats/metricbeat:{tag}
        # host 접근하기 위한 옵션
        args: ["-e", "--system.hostfs=/hostfs"]
        securityContext:
          #privileged: true
          # 필요한 권한만 부여
          capabilities:
            add:
              - SYS_PTRACE
              - DAC_READ_SEARCH
        volumeMounts:
        - name: config
          mountPath: /usr/share/metricbeat/metricbeat.yml
          subPath: metricbeat.yml
        - name: config
          mountPath: /usr/share/metricbeat/modules.d/elasticsearch.yml
          subPath: elasticsearch.yml
        - name: data
          mountPath: /usr/share/metricbeat/data
        # host에 마운트
        - name: hostfs
          mountPath: /hostfs
          readOnly: true
       volumes:
      - name: config
        configMap:
          name: metricbeat
      - name: data
        emptyDir: {}
      # host에 마운트
      - name: hostfs
        hostPath:
          path: /
      tolerations:
      - key: node-role.kubernetes.io/master
        effect: NoSchedule