腾讯蓝鲸平台部署v5.1版本[去坑]

腾讯蓝鲸平台部署

1. 环境准备

#1. 基础优化
ulimit -SHn 655360
yum remove mysql-devel -y &&  yum install mysql-devel -y

#2. yum源优化
wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.cloud.tencent.com/repo/centos7_base.repo
wget -O /etc/yum.repos.d/epel.repo http://mirrors.cloud.tencent.com/repo/epel-7.repo
yum clean all

#3. 解析
cat /etc/hosts:
81.69.219.162 chuocong.com
81.69.219.162 paas.chucong.com
81.69.219.162 docs.chuocong.com
81.69.219.162 o.chuocong.com
81.69.219.162 t.chuocong.com
81.69.219.162 cmdb.chuocong.com job.chuocong.com

安装包下载

wget https://bkopen-1252002024.file.myqcloud.com/ce/38f7796/bkce_src-5.1.29.tar.gz
tar -xvf /data/bkce_src-5.1.29.tar.gz -C /data/

证书配置

1. 先获取mac地址
cat /sys/class/net/eth0/address
52:54:00:26:13:ce  <---- mac地址

2. 去腾讯云粘贴mac地址 生成并下载证书
https://bk.tencent.com/download_ssl/

3. 解压证书
把下载好的证书文件上传到 /data 目录
tar -xvf /data/ssl_certificates.tar.gz -C /data/src/cert/

4. 避坑
 yum remove mysql-devel -y && yum install mysql-devel -y

蓝鲸配置

修改蓝鲸配置参数:
vim /data/install/globals.env
修改  export BK_DOMAIN="bk.com"
改为  export BK_DOMAIN="bk.cloud.tencent.com"

修改 [PAAS_ADMIN_PASS]对应密码为  admin
export PAAS_ADMIN_PASS='admin'

蓝鲸安装：

[root@rbtnode1 install]# ./install_minibk -y

------------------------- agreements ---------------------------------
    Dear users, welcome to use the Tencent BlueKing Software. Please
access http://bk.tencent.com/info/#laws to read the Tencent BlueKing
Software License and Service Agreement carefully. You have no right to
install or use the Software and related services unless you have read
and accepted all the terms of this Agreement. By downloading, install-
ing, using or logging in the Software, you shall be deemed to have
read and agreed to be bound by the Agreement above. If you have under-
stood the above content, please enter "yes" to continue installation,
otherwise, please enter "no" to abort. Thank you for your understan-
ding and support of the Tencent BlueKing Software.
----------------------------------------------------------------------
yes/no ?    <-- 输入 yes

问题集合

[root@node1 install]#  ./install_minibk -y
[10.105.26.156]20201025-190133 8   install.config exists. backup it to install.config.20201025_190133
‘install.config’ -> ‘install.config.20201025_190133’
<<check_ssh_nopass>> has been checked successfully... SKIP
<<check_password>> has been checked successfully... SKIP
start <<check_cert_mac>> ... [FAILED]
	cert not exists
[10.105.26.156]20201025-190133 34   bk_install precheck failed.

#证书无法通过验证，重新解压证书到/data/src/cert/目录
tar -xvf /data/ssl_certificates.tar.gz -C /data/src/cert/

 解决办法：
 yum remove mysql-devel -y && yum install mysql-devel -y

 #重启后发现页面都打不开？
  ./bkcec start all

环境验证

1. 登录到中控机，通过脚本自带的命令查询蓝鲸后台模块的运行状态
# 加载环境变量和蓝鲸安装维护的函数
source /data/install/utils.fc

# 查看运行状态
./bkcec status all    [全部是running为正确]

2. 检查 BKDATA 清洗数据的任务是否正常启动
   检查是否有包含 databus_etl 的任务
   crontab -l

3. 检查 BKDATA 运行状态
/data/bkce/bkdata/dataapi/bin/check_databus_status.sh

4. 检查 Agent 状态是否正常：
  在中控机执行
  ./bkcec status gse_agent

  # 返回 “Running” 说明 Agent 状态正常
  # 如果返回 "Exit" 则需要手动安装或者启动
  # 手动安装
  ./bkcec install gse_agent
  # 启动
  ./bkcec start gse_agent

 5. 检查健康状态 API：
   蓝鲸产品后台提供了健康检查的接口，用 HTTP GET 请求访问，接口地址和端口用变量表达：
   cd /data/install && source utils.fc
   # PaaS 注意 URL 末尾带上/
   curl http://pass.chuocong.com/healthz/

   # CMDB
   curl http://cmdb.chuocong.com

   # JOB
   http://job.chuocong.com

   # 开发者中心
   http://paas.chuocong.com/app/list/