Mõõdikute lubamine Notakey autentimisserveris

Meie autentimisserveri uusimad versioonid pakuvad mitmesuguseid töömõõdikuid, mis võimaldavad jälgida teenuse kasutust ja luua anomaaliate kohta hoiatusi. Mõõdikud on Prometheuse vormingus ja kättesaadavad otse Notakey seadme sõlmest.

Statistikat koondab stats-agent plugin, mis tuleb seadistada ühes või mitmes sõlmes. Võimalik on ka seadistus, kus mõõdikute jaoks kasutatakse VRRP aadressi.

# minimal plugin configuration

ntk cfg set :plugins.\"stats-agent\" '{
   "ports": [
      "9394:9394"
    ],
    "tag": "statsagent"
  }' --json-input

Kõigi plugina konteineritõmmiste uuendamiseks käivitage ntk plugins update ja seejärel ntk plugins restart.

Kui agent on seadistatud, tuleb autentimisserveris statistika lubada:

ntk cfg set :nas.custom_params "ENABLE_STATS=1,STATS_HOST=stats-agent"
ntk as restart

Nüüd on autentimisserveri mõõdikud kättesaadavad aadressil http://<internal-ip>:9394/metrics.

Mõned jälgitavad mõõdikud:

ntk_as_auth_requests_created: Number of created auth requests per service
ntk_as_auth_requests_failed: Number of failed creations of auth requests
ntk_as_auth_requests_signed: Number of signing events for auth requests per service
ntk_as_api_auth_success_total: Number of successful API client authentication requests
ntk_as_api_auth_failures_total: Number of failed API client authentication requests
ntk_as_api_token_auth_fail_total: Token auth validation requests that failed
ntk_as_api_tokens_emitted_total: Number of issued authentication tokens
ntk_as_seats_issued_total: Total number of issued licensed seats
ntk_as_seats_total: Total number of available licensed seats
ntk_as_seat_destroy_count: Number of license seat removal events
ntk_as_seat_create_count: Number of license seat create events
ntk_as_http_duration_seconds_count: Request count of HTTP reqs, per endpoint
ntk_as_http_duration_seconds_sum: Time spent in HTTP reqs in seconds, per endpoint

Selleks et stats-agent plugin kasutaks VRRP IP-aadressi, käivitage järgmised käsud:

# VRRP service must be configured on every node running stats-agent

# 172.17.0.1 is the default internal bridge IP address, available on every node
ntk cfg set vrrp.track.generic.url 'http://172.17.0.1:9394/metrics'

# Adjust IP address and select different priorities for each node
ntk cfg set vrrp.services.stats  '{
      "prio": "100",
      "vrid": "54",
      "interface": "eth0",
      "address": "10.0.1.97",
      "preempt": "off",
      "track": [
        "generic"
      ]
    }' --json-input

# Any VRRP config changes require restart
ntk vrrp restart

Pärast VRRP seadistamist suunake autentimisserver statistikat VRRP IP-aadressil avaldama: määrake STATS_HOST=10.0.1.97 ja taaskäivitage teenus (ntk as restart).