Huawei Cloud Deployment Manual

1 Introduction¶

1.1 Document Description¶

This document mainly focuses on deployment on Huawei Cloud, introducing the complete steps from resource planning and configuration to deploying Guance and running it.

Note:

• This document uses dataflux.cn as the main domain example; in actual deployment, replace it with the corresponding domain.

1.2 Key Terms¶

1.3 Deployment Architecture¶

2 Resource List¶

3 Infrastructure Deployment¶

3.1 Deployment Description¶

RDS, Redis, InfluxDB, Elasticsearch should be created according to the configuration requirements, all within the same region and under the same VPC network.

3.2 Steps One, Two, Three - CCE Service Creation¶

3.2.1 Step One - Purchase CCE Cluster¶

Go to the official website and select Products in the navigation bar, choose Container, click Cloud Container Engine CCE, and create a CCE cluster.

• It must be in the same region as the RDS, InfluxDB, and Elasticsearch resources mentioned later.
• Mainly choose the cluster size based on your own situation, and then create worker nodes later.

3.2.2 Step Two - Worker Node Configuration¶

Mainly choose ECS specifications and quantity. Specifications can be created according to the requirements in the resource list or assessed based on actual needs, but they cannot be lower than the minimum configuration requirements. The quantity should be at least 3 nodes, or more than 3, and here it is recommended that the data disk should not be less than 100GiB.

3.2.3 Step Three - Plugin Management¶

Everest and coredns plugins have been created by default when purchasing the k8s cluster. Here, it is recommended to add two additional plugins for installation. To ensure cluster resources and avoid additional costs, it is suggested to delete the ICAgent plugin.

Install nginx-ingress plugin

1) Configure CPU and memory resource limits

2) Create Load Balancer ELB

If needed, you can choose a dedicated elastic load balancer. In this article, we choose a shared type. Note: Choose Elastic Public IP and recommend using an existing one, or create a new one with a bandwidth charge of 300Mbit/s.

• Differences between dedicated and shared types can be found in the following link:

https://support.huaweicloud.com/productdesc-elb/elb_pro_0004.html

3) Configure nginx-ingress plugin content related to nginx forwarding

# Add the following content
{
    "allow-backend-server-header": "true",
    "client-header-buffer-size": "32k",
    "enable-underscores-in-headers": "true",
    "forwarded-for-header": "X-Forwarded-For",
    "generate-request-id": "true",
    "ignore-invalid-headers": "true",
    "keep-alive-requests": "100",
    "large-client-header-buffers": "4 32k",
    "proxy-body-size": "20m",
    "proxy-connect-timeout": "20",
    "reuse-port": "true",
    "server-tokens": "false",
    "ssl-protocols": "TLSv1 TLSv1.1 TLSv1.2 SSLv3",
    "ssl-redirect": "false",
    "use-gzip": "true",
    "worker-cpu-affinity": "auto"
}

Install node-local-dns plugin

• Enable DNS Config Injection function

Delete ICAgent plugin (Optional)

Choose AOM Application Operations Management, uninstall the ICAgent plugin, and turn off the switches for log over-limit collection and metric collection.

3.4 Step Four - Cache Service¶

• You can use the default built-in caching service. If you do not use the default built-in caching service, configure Redis according to the following requirements:
• Distributed caching service (Redis version).
• Redis version: 6.0, standard master-slave architecture, supports dual replicas.
• Set the Redis password.
• Add the automatically created ECS internal network IP of CCE to the Redis whitelist.

3.5 Step Five - InfluxDB¶

• Name: Cloud Database GaussDB(for influx)
• Version: 1.7
• Set InfluxDB user password
• Add the automatically created ECS internal network IP of CCE to the InfluxDB whitelist

3.6 Step Six - Elasticsearch¶

• Name: Cloud Search Service CSS
• Version: 7.10.2
• Enable security mode to set the administrator account and password
• Add the automatically created ECS internal network IP of CCE to the Elasticsearch whitelist

3.7 Step Seven - RDS¶

• Name: Cloud Database RDS
• Version: 8.0, standard master-slave edition
• Set the MySQL root user password
• Add the automatically created ECS internal network IP of CCE to the MySQL whitelist

4 kubectl Installation and Configuration¶

4.1 Install kubectl¶

kubectl is a Kubernetes command-line client tool that allows you to deploy applications, check, and manage cluster resources through this command-line tool. Our Launcher is based on this command-line tool for application deployment. Specific installation methods can be found in the official documentation:

Install and Configure kubectl

You can also click the cluster and find kubectl Click to View

4.2 Configure kube config¶

Choose whether to use public or private kubeconfig depending on whether your operations machine is connected to the cluster's internal network. Determine the connection method based on the use cases below.

5 Start Installation¶

After completing the operations, refer to the manual Start Installation