Helm/Zabbix: Difference between revisions

From Chorke Wiki
Jump to navigation Jump to search
← Older editNewer edit →
VisualWikitext
Line 414: Line 414:
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-postgresql
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-postgresql
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-web
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-web
</syntaxhighlight>
|}
==Helm » Uninstall==
{|class='wikitable mw-collapsible mw-collapsed'
!scope='col' style='text-align:left' colspan='2'|
Helm » Uninstall
|-
|valign='top' style='width:50%'|
<syntaxhighlight lang='bash'>
helm -n=zabbix-monitoring-system status    reloader
helm -n=zabbix-monitoring-system get all  reloader
helm -n=zabbix-monitoring-system uninstall reloader
</syntaxhighlight>
|valign='top' style='width:50%'|
<syntaxhighlight lang='bash'>
kubectl -n=zabbix-monitoring-system delete pvc --all
kubectl                            delete ns  zabbix-monitoring-system
kubectl                            delete pv  zabbix--postgresql-data-0
</syntaxhighlight>
</syntaxhighlight>
|}
|}

Revision as of 09:13, 26 January 2026

helm repo add zabbix-community https://zabbix-community.github.io/helm-zabbix
helm repo update && helm repo list
kubectl config get-contexts

Diagram

Helm » Context

Helm » Context 

export KUBECONFIG="${HOME}/.kube/aws-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/gcp-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/lke-kubeconfig.yaml"
export KUBECONFIG="${HOME}/.kube/config"

Helm » Install

Helm » Install 

helm show   values zabbix-community/zabbix --version=7.0.11|less
helm show   values zabbix-community/zabbix --version=7.0.12|less

export KUBECONFIG="${HOME}/.kube/shahed-ab-kubeconfig.yaml"
kubectl create ns   zabbix-monitoring-system || true

kubectl get ns|grep zabbix-monitoring-system
kubectl delete ns   zabbix-monitoring-system || true
Secret Notes 
cat <<ENV | \
kubectl -n zabbix-monitoring-system create secret generic postgres \
 --from-env-file=/dev/stdin --dry-run=client -o=yaml | kubectl apply -f -
host=zabbix-postgresql.zabbix-monitoring-system
password=AbO330a$0FRv4XxY
dbname=shahed_zabbix_ops
user=shahed_zabbix_ops
port=5432
ENV

kubectl -n zabbix-monitoring-system get    Secret postgres -o=yaml
kubectl -n zabbix-monitoring-system delete Secret postgres

echo "$(cat /dev/urandom|tr -dc 'A-Za-z0-9'|head -c 16)"
Install Notes 
cat <<'YML' | \
helm -n=zabbix-monitoring-system upgrade \
-i zabbix zabbix-community/zabbix --version=7.0.12 -f -
---
nameOverride: zabbix
fullnameOverride: zabbix
zabbixImageTag: ubuntu-7.0.16
postgresAccess:
  existingSecretName: postgres

zabbixServer:
  enabled: true
  zabbixServerHA:
    enabled: false
    dbCreateUpgradeJob:
      image:
        repository: ghcr.io/zabbix-community/zabbix-server-create-upgrade-db
  replicaCount: 1
  image:
    repository: zabbix/zabbix-server-pgsql

ingress:
  enabled: true
  annotations:
    kubernetes.io/ingress.class: nginx
  hosts:
  - host: zabbix.shahed.biz.ops
    paths:
    - path: /
      pathType: ImplementationSpecific
YML
Status Verify 
helm -n=zabbix-monitoring-system status          zabbix
helm -n=zabbix-monitoring-system get    manifest zabbix

telnet             zabbix.shahed.biz.ops 80
setsid open http://zabbix.shahed.biz.ops >/dev/null 2>&1 &

Helm » Ingress

Helm » Ingress 

cat <<'YML' | \
kubectl -n zabbix-monitoring-system apply -f -
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: zabbix-cert
  namespace: zabbix-monitoring-system
spec:
  secretName: zabbix-cert
  commonName: zabbix.shahed.biz.ops
  dnsNames:
    - zabbix.shahed.biz.ops
  duration: 8760h
  renewBefore: 720h
  privateKey:
    size: 256
    encoding: PKCS8
    algorithm: ECDSA
    rotationPolicy: Always
  usages:
    - digital signature
    - key encipherment
    - server auth
    - client auth
  subject:
    countries: ["BD"]
    provinces: ["Dhaka"]
    postalCodes: ["1500"]
    localities: ["Munshiganj"]
    organizations: ["Shahed, Inc."]
    organizationalUnits: ["zabbix.shahed.biz.ops"]
    streetAddresses: ["256 Khal East, Passport Office"]
  issuerRef:
    name: shahed-ecc-sub-ca-2025-k8s
    kind: ClusterIssuer
YML

cat <<'CRT' | \
sudo tee /usr/local/share/ca-certificates/Shahed_ECC_Root_CA_2025.crt >/dev/null
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
CRT

sudo update-ca-certificates --fresh
sudo update-ca-certificates

Shahed_ECC_Root_CA_2025 » Firefox » Settings » Certificates » View Certificates » Import

kubectl -n zabbix-monitoring-system get    Secret      zabbix-cert -o=yaml
kubectl -n zabbix-monitoring-system get    Certificate zabbix-cert -o=yaml

kubectl -n zabbix-monitoring-system delete Secret      zabbix-cert -o=yaml
kubectl -n zabbix-monitoring-system delete Certificate zabbix-cert -o=yaml

kubectl -n  cert-manager rollout restart deployment cert-manager-webhook
kubectl get ValidatingWebhookConfiguration          cert-manager-webhook

cat <<'YML' | \
kubectl -n zabbix-monitoring-system patch ingress/zabbix --patch-file=/dev/stdin
---
metadata:
  annotations:
    cert-manager.io/cluster-issuer: shahed-ecc-sub-ca-2025-k8s
spec:
  tls:
    - hosts:
        - zabbix.shahed.biz.ops
      secretName: zabbix-cert
YML

cat <<'YML' | \
kubectl -n zabbix-monitoring-system patch ingress/zabbix --patch-file=/dev/stdin
---
metadata:
  annotations:
    cert-manager.io/cluster-issuer: null
spec:
  tls: null



YML
Telnet Browse 
telnet zabbix.shahed.biz.ops  80
telnet zabbix.shahed.biz.ops 443

setsid open  http://zabbix.shahed.biz.ops >/dev/null 2>&1 &
setsid open https://zabbix.shahed.biz.ops >/dev/null 2>&1 &

Helm » Scaling

Helm » Scaling

Scale » Down Scale » Up 
kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-webservice --replicas=0

kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-webservice --replicas=1

kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-server --replicas=0

kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-server --replicas=1

kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-web --replicas=0

kubectl -n=zabbix-monitoring-system \
scale deploy/zabbix-zabbix-web --replicas=1

kubectl -n=zabbix-monitoring-system \
scale sts/zabbix-postgresql --replicas=0

kubectl -n=zabbix-monitoring-system \
scale sts/zabbix-postgresql --replicas=1

Helm » Debug

Helm » Debug 

kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- psql  -p5432 -U shahed_zabbix_ops -d shahed_zabbix_ops
kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql -- printenv|grep -i postgres_

kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-webservice -c zabbix-webservice -- bash
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-webservice -c zabbix-webservice

kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-server     -c zabbix-server     -- bash
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-server     -c zabbix-server

kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-postgresql        -c postgresql        -- bash
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-postgresql        -c postgresql

kubectl -n=zabbix-monitoring-system exec -it svc/zabbix-zabbix-web        -c zabbix-web        -- bash
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-web        -c zabbix-web

kubectl -n=zabbix-monitoring-system get  Pod     -o=yaml|yq -P '.items[].spec.containers[].name'
kubectl -n=zabbix-monitoring-system get  Pod     -o=yaml|yq -P '.items[].metadata.labels'
kubectl -n=zabbix-monitoring-system get  Ingress -o=yaml|yq -P '.items[].metadata.name'
kubectl -n=zabbix-monitoring-system get  Service -o=yaml|yq -P '.items[].metadata.name'
kubectl -n=zabbix-monitoring-system get  deploy  -o=yaml|yq -P '.items[].metadata.name'
kubectl -n=zabbix-monitoring-system get  sts     -o=yaml|yq -P '.items[].metadata.name'
kubectl -n=zabbix-monitoring-system get  Pod     --show-labels
kubectl -n=zabbix-monitoring-system get  Service

kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-webservice
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-server
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-postgresql
kubectl -n=zabbix-monitoring-system logs -f  svc/zabbix-zabbix-web

Helm » Uninstall

Helm » Uninstall 

helm -n=zabbix-monitoring-system status    reloader
helm -n=zabbix-monitoring-system get all   reloader
helm -n=zabbix-monitoring-system uninstall reloader

kubectl -n=zabbix-monitoring-system delete pvc --all
kubectl                             delete ns  zabbix-monitoring-system
kubectl                             delete pv  zabbix--postgresql-data-0

References

References

Retrieved from "https://wiki.chorke.org/index.php?title=Helm/Zabbix&oldid=16480"