如何在 Ubuntu 16.04 上使用 Docker Swarm 安装和保护 OpenFaaS

1cd ~
2git clone https://github.com/openfaas/faas.git

1cd ~/faas

1git checkout 0.8.9

 1[secondary_label Output]
 2Note: checking out '0.8.9'.
 3
 4You are in 'detached HEAD' state. You can look around, make experimental
 5changes and commit them, and you can discard any commits you make in this
 6state without impacting any branches by performing another checkout.
 7
 8If you want to create a new branch to retain commits you create, you may
 9do so (now or later) by using -b with the checkout command again. Example:
10
11  git checkout -b <new-branch-name>
12
13HEAD is now at 8f0d2d1 Expose scale-function endpoint

1cd ~
2curl -sSL -o faas-cli.sh https://cli.openfaas.com

1less faas-cli.sh

1chmod +x faas-cli.sh
2sudo ./faas-cli.sh

 1[secondary_label Output]
 2x86_64
 3Downloading package https://github.com/openfaas/faas-cli/releases/download/0.6.17/faas-cli as /tmp/faas-cli
 4Download complete.
 5
 6Running as root - Attempting to move faas-cli to /usr/local/bin
 7New version of faas-cli installed to /usr/local/bin
 8Creating alias 'faas' for 'faas-cli'.
 9  ___ _____ ____
10 / _ \ _ __ ___ _ __ |  ___|_ _ __ _/ ___|
11| | | | '_ \ / _ \ '_ \| |_ / _` |/ _` \___ \
12| |_| | |_) |  __/ | | |  _| (_| | (_| |___) |
13 \___/| .__/ \___|_| |_|_|  \__,_|\__,_|____/
14      |_|
15
16CLI:
17 commit:  b5597294da6dd98457434fafe39054c993a5f7e7
18 version: 0.6.17

1faas-cli

 1[secondary_label Output]
 2  ___ _____ ____
 3 / _ \ _ __ ___ _ __ |  ___|_ _ __ _/ ___|
 4| | | | '_ \ / _ \ '_ \| |_ / _` |/ _` \___ \
 5| |_| | |_) |  __/ | | |  _| (_| | (_| |___) |
 6 \___/| .__/ \___|_| |_|_|  \__,_|\__,_|____/
 7      |_|
 8
 9Manage your OpenFaaS functions from the command line
10
11Usage:
12  faas-cli [flags]
13  faas-cli [command]
14
15Available Commands:
16  build Builds OpenFaaS function containers
17  cloud OpenFaaS Cloud commands
18  deploy Deploy OpenFaaS functions
19  help Help about any command
20  invoke Invoke an OpenFaaS function
21  list List OpenFaaS functions
22  login Log in to OpenFaaS gateway
23  logout Log out from OpenFaaS gateway
24  new Create a new template in the current folder with the name given as name
25  push Push OpenFaaS functions to remote registry (Docker Hub)
26  remove Remove deployed OpenFaaS functions
27  store OpenFaaS store commands
28  template Downloads templates from the specified github repo
29  version Display the clients version information
30
31Flags:
32      --filter string Wildcard to match with function names in YAML file
33  -h, --help help for faas-cli
34      --regex string Regex to match with function names in YAML file
35  -f, --yaml string Path to YAML file describing function(s)
36
37Use "faas-cli [command] --help" for more information about a command.

1cd ~/faas
2nano ~/faas/docker-compose.yml

1[label ~/faas/docker-compose.yml]
2version: "3.3"
3services:
4    traefik:
5        image: traefik:v1.6
6    gateway:
7         ...

 1[label ~/faas/docker-compose.yml]
 2...
 3    traefik:
 4        image: traefik:v1.6
 5        command: -c --docker=true
 6            --docker.swarmmode=true
 7            --docker.domain=traefik
 8            --docker.watch=true
 9            --web=true
10            --defaultEntryPoints='http,https'
11            --entryPoints='Name:https Address::443 TLS'
12            --entryPoints='Name:http Address::80'
13            --acme=true
14            --acme.entrypoint='https'
15            --acme.httpchallenge=true
16            --acme.httpchallenge.entrypoint='http'
17            --acme.domains='example.com, www.example.com'
18            --acme.email='[email protected]'
19            --acme.ondemand=true
20            --acme.onhostrule=true
21            --acme.storage=/etc/traefik/acme/acme.json
22...

1[label ~/faas/docker-compose.yml]
2        ...
3        command:
4            ...
5    	ports:
6            - 80:80
7            - 8080:8080
8            - 443:443
9        ...

 1[label ~/faas/docker-compose.yml]
 2    	...
 3    	volumes:
 4            - "/var/run/docker.sock:/var/run/docker.sock"
 5            - "acme:/etc/traefik/acme"
 6        networks:
 7            - functions
 8        deploy:
 9            placement:
10                constraints: [node.role == manager]

 1[label ~/faas/docker-compose.yml]
 2version: "3.3"
 3services:
 4    traefik:
 5        image: traefik:v1.6
 6        command: -c --docker=true
 7            --docker.swarmmode=true
 8            --docker.domain=traefik
 9            --docker.watch=true
10            --web=true
11            --defaultEntryPoints='http,https'
12            --entryPoints='Name:https Address::443 TLS'
13            --entryPoints='Name:http Address::80'            
14            --acme=true
15            --acme.entrypoint='https'
16            --acme.httpchallenge=true
17            --acme.httpchallenge.entrypoint='http'
18            --acme.domains='example.com, www.example.com'
19            --acme.email='[email protected]'
20            --acme.ondemand=true
21            --acme.onhostrule=true
22            --acme.storage=/etc/traefik/acme/acme.json
23        ports:
24            - 80:80
25            - 8080:8080
26            - 443:443
27        volumes:
28            - "/var/run/docker.sock:/var/run/docker.sock"
29            - "acme:/etc/traefik/acme"
30        networks:
31          - functions
32        deploy:
33          placement:
34            constraints: [node.role == manager]
35    
36    gateway:
37    	...

 1[label ~/faas/docker-compose.yml]
 2...
 3    gateway:
 4        ports:
 5            - 8080:8080
 6        image: openfaas/gateway:0.8.7
 7        networks:
 8            - functions
 9        environment:
10            functions_provider_url: "http://faas-swarm:8080/"
11            read_timeout:  "300s"        # Maximum time to read HTTP request
12            write_timeout: "300s"        # Maximum time to write HTTP response
13            upstream_timeout: "300s"     # Maximum duration of upstream function call - should be more than read_timeout and write_timeout
14            dnsrr: "true"               # Temporarily use dnsrr in place of VIP while issue persists on PWD
15            faas_nats_address: "nats"
16            faas_nats_port: 4222
17            direct_functions: "true"    # Functions are invoked directly over the overlay network
18            direct_functions_suffix: ""
19            basic_auth: "${BASIC_AUTH:-true}"
20            secret_mount_path: "/run/secrets/"
21            scale_from_zero: "false"
22        deploy:
23            resources:
24                # limits:   # Enable if you want to limit memory usage
25                #     memory: 200M
26                reservations:
27                    memory: 100M
28            restart_policy:
29                condition: on-failure
30                delay: 5s
31                max_attempts: 20
32                window: 380s
33            placement:
34                constraints:
35                    - 'node.platform.os == linux'
36        secrets:
37            - basic-auth-user
38            - basic-auth-password
39...

1[label ~/faas/docker-compose.yml]
2    	...
3        deploy:
4            labels:
5            	- traefik.port=8080
6            	- traefik.frontend.rule=PathPrefix:/ui,/system,/function
7            resources:
8    		...

 1[label ~/faas/docker-compose.yml]
 2...
 3    gateway:       
 4        image: openfaas/gateway:0.8.7
 5        networks:
 6            - functions
 7        environment:
 8            functions_provider_url: "http://faas-swarm:8080/"
 9            read_timeout:  "300s"        # Maximum time to read HTTP request
10            write_timeout: "300s"        # Maximum time to write HTTP response
11            upstream_timeout: "300s"     # Maximum duration of upstream function call - should be more than read_timeout and write_timeout
12            dnsrr: "true"               # Temporarily use dnsrr in place of VIP while issue persists on PWD
13            faas_nats_address: "nats"
14            faas_nats_port: 4222
15            direct_functions: "true"    # Functions are invoked directly over the overlay network
16            direct_functions_suffix: ""
17            basic_auth: "${BASIC_AUTH:-true}"
18            secret_mount_path: "/run/secrets/"
19            scale_from_zero: "false"
20        deploy:
21            labels:
22            	- traefik.port=8080
23            	- traefik.frontend.rule=PathPrefix:/ui,/system,/function
24            resources:
25                # limits:   # Enable if you want to limit memory usage
26                #     memory: 200M
27                reservations:
28                    memory: 100M
29            restart_policy:
30                condition: on-failure
31                delay: 5s
32                max_attempts: 20
33                window: 380s
34            placement:
35                constraints:
36                    - 'node.platform.os == linux'
37        secrets:
38            - basic-auth-user
39            - basic-auth-password
40...

1[label ~/faas/docker-compose.yml]
2...
3volumes:
4    acme:

1docker-machine use node-1

1eval $(docker-machine env node-1)

1~/faas/deploy_stack.sh

 1[secondary_label Output]
 2Attempting to create credentials for gateway..
 3roozmk0y1jkn17372a8v9y63g
 4q1odtpij3pbqrmmf8msy3ampl
 5[Credentials]
 6 username: admin
 7 password: your_openfaas_password
 8 echo -n your_openfaas_password | faas-cli login --username=admin --password-stdin
 9
10Enabling basic authentication for gateway..
11
12Deploying OpenFaaS core services
13Creating network func_functions
14Creating config func_alertmanager_config
15Creating config func_prometheus_config
16Creating config func_prometheus_rules
17Creating service func_alertmanager
18Creating service func_traefik
19Creating service func_gateway
20Creating service func_faas-swarm
21Creating service func_nats
22Creating service func_queue-worker
23Creating service func_prometheus

1echo -n your_openfaas_password | faas-cli login --username=admin --password-stdin --gateway https://example.com

1[secondary_label Output]
2Calling the OpenFaaS server to validate the credentials...
3credentials saved for admin https://example.com

1faas-cli deploy -f ~/faas/stack.yml --gateway https://example.com

 1[secondary_label Output]
 2Deploying: wordcount.
 3
 4Deployed. 200 OK.
 5URL: https://example.com/function/wordcount
 6
 7Deploying: base64.
 8
 9Deployed. 200 OK.
10URL: https://example.com/function/base64
11
12Deploying: markdown.
13
14Deployed. 200 OK.
15URL: https://example.com/function/markdown
16
17Deploying: hubstats.
18
19Deployed. 200 OK.
20URL: https://example.com/function/hubstats
21
22Deploying: nodeinfo.
23
24Deployed. 200 OK.
25URL: https://example.com/function/nodeinfo
26
27Deploying: echoit.
28
29Deployed. 200 OK.
30URL: https://example.com/function/echoit

1faas-cli list --gateway https://example.com

1[secondary_label Output]
2Function Invocations Replicas
3markdown 0 1
4wordcount 0 1
5base64 0 1
6nodeinfo 0 1
7hubstats 0 1
8echoit 0 1

1curl -u admin:your_openfaas_password -X GET https://example.com/system/functions

1[secondary_label Output]
2[{"name":"base64","image":"functions/alpine:latest","invocationCount":0,"replicas":1,"envProcess":"base64","availableReplicas":0,"labels":{"com.openfaas.function":"base64","function":"true"}},{"name":"nodeinfo","image":"functions/nodeinfo:latest","invocationCount":0,"replicas":1,"envProcess":"","availableReplicas":0,"labels":{"com.openfaas.function":"nodeinfo","function":"true"}},{"name":"hubstats","image":"functions/hubstats:latest","invocationCount":0,"replicas":1,"envProcess":"","availableReplicas":0,"labels":{"com.openfaas.function":"hubstats","function":"true"}},{"name":"markdown","image":"functions/markdown-render:latest","invocationCount":0,"replicas":1,"envProcess":"","availableReplicas":0,"labels":{"com.openfaas.function":"markdown","function":"true"}},{"name":"echoit","image":"functions/alpine:latest","invocationCount":0,"replicas":1,"envProcess":"cat","availableReplicas":0,"labels":{"com.openfaas.function":"echoit","function":"true"}},{"name":"wordcount","image":"functions/alpine:latest","invocationCount":0,"replicas":1,"envProcess":"wc","availableReplicas":0,"labels":{"com.openfaas.function":"wordcount","function":"true"}}]

1docker service logs func_gateway

1curl -u admin:your_openfaas_password -X GET https://example.com/system/functions | jq

 1[secondary_label Output]
 2[
 3  {
 4    "name": "base64",
 5    "image": "functions/alpine:latest",
 6    "invocationCount": 0,
 7    "replicas": 1,
 8    "envProcess": "base64",
 9    "availableReplicas": 0,
10    "labels": {
11      "com.openfaas.function": "base64",
12      "function": "true"
13    }
14  },
15  {
16    "name": "nodeinfo",
17    "image": "functions/nodeinfo:latest",
18    "invocationCount": 0,
19    "replicas": 1,
20    "envProcess": "",
21    "availableReplicas": 0,
22    "labels": {
23      "com.openfaas.function": "nodeinfo",
24      "function": "true"
25    }
26  },
27  {
28    "name": "hubstats",
29    "image": "functions/hubstats:latest",
30    "invocationCount": 0,
31    "replicas": 1,
32    "envProcess": "",
33    "availableReplicas": 0,
34    "labels": {
35      "com.openfaas.function": "hubstats",
36      "function": "true"
37    }
38  },
39  {
40    "name": "markdown",
41    "image": "functions/markdown-render:latest",
42    "invocationCount": 0,
43    "replicas": 1,
44    "envProcess": "",
45    "availableReplicas": 0,
46    "labels": {
47      "com.openfaas.function": "markdown",
48      "function": "true"
49    }
50  },
51  {
52    "name": "echoit",
53    "image": "functions/alpine:latest",
54    "invocationCount": 0,
55    "replicas": 1,
56    "envProcess": "cat",
57    "availableReplicas": 0,
58    "labels": {
59      "com.openfaas.function": "echoit",
60      "function": "true"
61    }
62  },
63  {
64    "name": "wordcount",
65    "image": "functions/alpine:latest",
66    "invocationCount": 0,
67    "replicas": 1,
68    "envProcess": "wc",
69    "availableReplicas": 0,
70    "labels": {
71      "com.openfaas.function": "wordcount",
72      "function": "true"
73    }
74  }
75]

1curl -u admin:your_openfaas_password -X POST https://example.com/function/func_echoit -d "Sammy The Shark"

1[secondary_label Output]
2Sammy The Shark

1mkdir ~/faas-functions
2cd ~/faas-functions

1faas-cli new echo-input --lang python --prefix your-docker-hub-username --gateway https://example.com

 1[secondary_label Output]
 22018/05/13 12:13:06 No templates found in current directory.
 32018/05/13 12:13:06 Attempting to expand templates from https://github.com/openfaas/templates.git
 42018/05/13 12:13:11 Fetched 12 template(s) : [csharp dockerfile go go-armhf node node-arm64 node-armhf python python-armhf python3 python3-armhf ruby] from https://github.com/openfaas/templates.git
 5Folder: echo-input created.
 6  ___ _____ ____
 7 / _ \ _ __ ___ _ __ |  ___|_ _ __ _/ ___|
 8| | | | '_ \ / _ \ '_ \| |_ / _` |/ _` \___ \
 9| |_| | |_) |  __/ | | |  _| (_| | (_| |___) |
10 \___/| .__/ \___|_| |_|_|  \__,_|\__,_|____/
11      |_|
12
13Function created in folder: echo-input
14Stack file written: echo-input.yml

1cd ~/faas-fucntions/echo-input

1ls

1cat requirements.txt

1nano handler.py

1def handle(req):
2    """handle a request to the function
3    Args:
4        req (str): request body
5    """
6
7    return req

1return "Received message: " + req

1cd ~/faas-functions

1faas-cli build -f echo-input.yml

 1[secondary_label Output]
 2[0] > Building echo-input.
 3Clearing temporary build folder: ./build/echo-input/
 4Preparing ./echo-input/ ./build/echo-input/function
 5Building: sammy/echo-input with python template. Please wait..
 6Sending build context to Docker daemon 7.168kB
 7Step 1/16 : FROM python:2.7-alpine
 8 ---> 5fdd069daf25
 9Step 2/16 : RUN apk --no-cache add curl     && echo "Pulling watchdog binary from Github."     && curl -sSL https://github.com/openfaas/faas/releases/download/0.8.0/fwatchdog > /usr/bin/fwatchdog     && chmod +x /usr/bin/fwatchdog     && apk del curl --no-cache
10 ---> Using cache
11 ---> 247d4772623a
12Step 3/16 : WORKDIR /root/
13 ---> Using cache
14 ---> 532cc683d67b
15Step 4/16 : COPY index.py           .
16 ---> Using cache
17 ---> b4b512152257
18Step 5/16 : COPY requirements.txt   .
19 ---> Using cache
20 ---> 3f9cbb311ab4
21Step 6/16 : RUN pip install -r requirements.txt
22 ---> Using cache
23 ---> dd7415c792b1
24Step 7/16 : RUN mkdir -p function
25 ---> Using cache
26 ---> 96c25051cefc
27Step 8/16 : RUN touch ./function/__init__.py
28 ---> Using cache
29 ---> 77a9db274e32
30Step 9/16 : WORKDIR /root/function/
31 ---> Using cache
32 ---> 88a876eca9e3
33Step 10/16 : COPY function/requirements.txt	.
34 ---> Using cache
35 ---> f9ba5effdc5a
36Step 11/16 : RUN pip install -r requirements.txt
37 ---> Using cache
38 ---> 394a1dd9e4d7
39Step 12/16 : WORKDIR /root/
40 ---> Using cache
41 ---> 5a5893c25b65
42Step 13/16 : COPY function function
43 ---> eeddfa67018d
44Step 14/16 : ENV fprocess="python index.py"
45 ---> Running in 8e53df4583f2
46Removing intermediate container 8e53df4583f2
47 ---> fb5086bc7f6c
48Step 15/16 : HEALTHCHECK --interval=1s CMD [ -e /tmp/.lock ] || exit 1
49 ---> Running in b38681a71378
50Removing intermediate container b38681a71378
51 ---> b04c045b0994
52Step 16/16 : CMD ["fwatchdog"]
53 ---> Running in c5a11078df3d
54Removing intermediate container c5a11078df3d
55 ---> bc5f08157c5a
56Successfully built bc5f08157c5a
57Successfully tagged sammy/echo-input:latest
58Image: your-docker-hub-username/echo-input built.
59[0] < Building echo-input done.
60[0] worker done.

1faas-cli push -f echo-input.yml

 1[secondary_label Output]
 2[0] > Pushing echo-input.
 3The push refers to repository [docker.io/sammy/echo-input]
 4320ea573b385: Pushed 
 59d87e56f5d0c: Pushed 
 66f79b75e7434: Pushed 
 723aac2d8ecf2: Pushed 
 82bec17d09b7e: Pushed 
 9e5a0e5ab3be6: Pushed 
10e9c8ca932f1b: Pushed 
11beae1d55b4ce: Pushed 
122fcae03ed1f7: Pushed 
1362103d5daa03: Mounted from library/python 
14f6ac6def937b: Mounted from library/python 
1555c108c7613c: Mounted from library/python 
16e53f74215d12: Mounted from library/python 
17latest: digest: sha256:794fa942c2f593286370bbab2b6c6b75b9c4dcde84f62f522e59fb0f52ba05c1 size: 3033
18[0] < Pushing echo-input done.
19[0] worker done.

1faas-cli deploy -f echo-input.yml --gateway https://example.com

1[secondary_label Output]
2Deploying: echo-input.
3
4Deployed. 200 OK.
5URL: https://example.com/function/echo-input

1faas-cli invoke echo-input --gateway https://example.com

1[secondary_label Output]
2Reading from STDIN - hit (Control + D) to stop.

1Sammy The Shark!

1[secondary_label Output]
2Reading from STDIN - hit (Control + D) to stop.
3Sammy The Shark!
4Received message: Sammy The Shark!