Prometheus(三) node_exporter添加https与basic认证

使用htpasswd 生成认证密钥对

[root@localhost ~]#htpasswd -c /etc/nginx/.htpasswd monitor
New password:
Re-type new password:
Adding password for user admin

查看生成的秘钥

[root@localhost ~]#cat /etc/nginx/.htpasswd
admin: dddvvvdfdfserrtdss

用openssl生成自签10年证书

[root@localhost ~]# openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -keyout server.key -out server.crt -subj "/C=CN/ST=SiChuan/L=ChengDu/O=IT/CN=IT"

[root@localhost ~]#vim /root/node_exporter.yml
tls_server_config:
  cert_file: server.crt
  key_file: server.key
basic_auth_users:
  admin: dddvvvdfdfserrtdss

在https://prometheus.io/download/中下载node_exporter，然后上传被监控的服务器；
配置systemctl启动服务node_exporter

[root@localhost ~]#vim /usr/lib/systemd/system/node_exporter.service

[Unit]
Description=node_exporter
[Service]
Restart=on-failure
WorkingDirectory=/usr/src/node_exporter
ExecStart=/usr/src/node_exporter/node_exporter --web.config=/root/node_exporter.yml
[Install]
WantedBy=multi-user.target

systemctl daemon-reload
systemctl start node_exporter.service
systemctl enable node_exporter.service

到安装目录下可查看默认配置
[root@localhost node_exporter]# ./node_exporter –help
在prometheus服务器添加prometheus.yml文档

 - job_name:  linux_node 
    scheme: https
    basic_auth:
      username:  账户 
      password:  密码 
    tls_config:
      insecure_skip_verify: true
    file_sd_configs:
            #注意路径
            - files: [ /usr/local/prometheus/node/node_exporter.json ]
              refresh_interval: 15s

用json格式的自动发现

[root@localhost node]#  vim node_exporter.json
[
   {
     "targets": [ "192.168.0.57:9100"],
     "labels": {
     "app": "server1",
     "env": "XXB",
     "region": "13F"
    }
  },
   {
     "targets": [ "192.168.0.18:9100" ],
      "labels": {
       "app": "server2",
       "env": "XXB",
       "region": "12F"
       }
   },
   {
     "targets": [ "192.168.0.24:9100" ],
             "labels": {
             "app": "server3",
             "env": "XXB",
             "region": "13F-12U",
             "Person": "张三"
       }
    }
]