TL;DR

簡單來說, 我希望把 `kubectl get event`事件對接到集群外面, 直接推送到企業(yè)微信.

0x01 原理

直接使用開源組件 kubewatch
這個組件支持 http webhook , 我們只需要另行簡單開發(fā)一個 webhook接口就好了.

按官方文檔部署時, 有一個坑, webhook一直無法被調(diào)用.
最后還是按自己的方式嘗試解決:

在啟動Pod時 添加env , 指定webhook的 URL參數(shù): KW_WEBHOOK_URL

0x02 部署文件

下面這個文件可以直接部署: kubectl apply -f a.yaml

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: kubewatch
data:
  .kubewatch.yaml: |
    resource:
      deployment: true
      replicationcontroller: true
      replicaset: true
      daemonset: true
      services: true
      pod: true
      secret: true
      configmap: true
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: kubewatch
rules:
- apiGroups: ["", "apps"]
  resources: ["namespaces","deployments","pods","services", "replicationcontrollers"]
  verbs: ["get", "watch", "list"]
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: kubewatch
  namespace: default
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubewatch
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: kubewatch
subjects:
  - kind: ServiceAccount
    name: kubewatch
    namespace: default
---
apiVersion: v1
kind: Pod
metadata:
  name: kubewatch
  namespace: default
spec:
  serviceAccountName: kubewatch
  containers:
  - image: bitnami/kubewatch
    imagePullPolicy: Always
    name: kubewatch
    volumeMounts:
    - name: config-volume
      mountPath: /root
    env:
      - name: KW_WEBHOOK_URL
        value: "http://10.10.10.10:8080"
  restartPolicy: Always
  volumes:
  - name: config-volume
    configMap:
      name: kubewatch

0x03 Webhook數(shù)據(jù)結(jié)構(gòu)

查看源碼發(fā)現(xiàn)調(diào)用webhook時, 會發(fā)起一個post請求, body 為 json 字符串

下面是go語言的處理實現(xiàn):

import (
    "fmt"
    "github.com/gin-gonic/gin"
    "os"
    "time"
)

// WebhookMessage for messages
type WebhookMessage struct {
    EventMeta EventMeta `json:"eventmeta"`
    Text      string    `json:"text"`
    Time      time.Time `json:"time"`
}

// EventMeta containes the meta data about the event occurred
type EventMeta struct {
    Kind      string `json:"kind"`
    Name      string `json:"name"`
    Namespace string `json:"namespace"`
    Reason    string `json:"reason"`
}

func main() {
    r := gin.Default()
    r.POST("/", func(c *gin.Context) {
        var body WebhookMessage
        if c.BindJSON(&body) != nil {
            c.JSON(200, gin.H{"err": "invalid param"})
            return
        }
        // 發(fā)送微信消息: SendTextMessage(body.ToWeChatString())
        c.JSON(200, gin.H{"reason": body.EventMeta.Reason})
    })
    r.Run(":8080")
}

關于微信發(fā)消息, 自行baidu, 不再贅述.