Docker Swarm and Secret support with OMS Insight and Analytics - container monitoring solution
Hello all, this is Keiko, Program Manager from the OMS team.
The container monitoring solution, available as part of OMS Insight and Analytics, helps you get visibility into the inventory of containers in hosts, including images running in them and detailed audit of commands executed. It provides a centralized view of CPU, memory, storage, and network usage and performance information for multiple different types of containers, including Docker and Windows, in your environment. It helps you troubleshoot by viewing and searching centralized logs without having to remotely view container hosts. Based on your requests, we are extending this solution to support Docker Swarm mode and Secret. With this support, you have a unified container monitoring solution for containers on Mesosphere DC/OS, Kubernetes, and Docker Swarm, on-premises or in any public cloud.
For more information, see the Container Solution documentation.
OMS Agent for Linux can be run as a global service on Docker Swarm by running the commands below.
keiko@swarmm-master-13957614-0:~# sudo docker service create --name omsagent --mode global --mount type=bind,source=/var/run/docker.sock,destination=/var/run/docker.sock -e WSID="" -e KEY="" -p 25225:25225 -p 25224:25224/udp --restart-condition=on-failure microsoft/oms keiko@swarmm-master-13957614-0:~# sudo docker service ls ID NAME MODE REPLICAS IMAGE qiq3y13rwoyn omsagent global 2/2 microsoft/oms
Secrets with Docker Swarm and Kubernetes for OMS Workspace ID and Primary Key
For those who want to make their OMS Workspace ID and Primary Key information more secure, Kubernetes and Docker Swarm secrets are available.
For Kubernetes, we created a script to generate the secrets yaml file for Workspace ID and Primary Key. This can be used with the omsagent yaml file for secrets.
keiko@ubuntu16-13db:~# sudo kubectl describe secrets omsagent-secret Name: omsagent-secret Namespace: default Labels: Annotations: Type: Opaque Data ==== WSID: 36 bytes KEY: 88 bytes
For more information, see the Kubernetes Readme file.
For Docker Swarm, once the secret for Workspace ID and Primary Key is created, you can create the Docker service for omsagent.
keiko@swarmm-master-13957614-0:# sudo docker secret ls ID NAME CREATED UPDATED j2fj153zxy91j8zbcitnjxjiv WSID 43 minutes ago 43 minutes ago l9rh3n987g9c45zffuxdxetd9 KEY 38 minutes ago 38 minutes ago
keiko@swarmm-master-13957614-0:# docker service create --name omsagent --mode global --mount type=bind,source=/var/run/docker.sock,destination=/var/run/docker.sock --secret source=WSID,target=WSID --secret source=KEY,target=KEY -p 25225:25225 -p 25224:25224/udp --restart-condition=on-failure microsoft/oms
For more information, see the Docker Swarm Agent Secrets Readme file.
How do I try this?
Get a free Microsoft Operations Management + Security (#MSOMS) account so that you can test the Container Monitoring Solution features. You can also get a free subscription for Microsoft Azure.
How can I give you feedback?
There are a few different routes to give feedback:
- UserVoice: Post ideas for new OMS features to work on. Visit the OMS UserVoice page.
- OMS Forums: Good general discussion of OMS. Visit the OMS Forums.
- Email: OMScontainers@microsoft.com Tell us whatever is on your mind.
We will be enhancing more monitoring capabilities for containers. If you have feedback or questions, please feel free to contact us.
Keiko Harada, Program Manager
Microsoft Operations Management Team