Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Support for scraping multiple mysqld hosts (#651)
Add multi-target exporter scrape support. Breaking change: `DATA_SOURCE_NAME` is now removed. Local configuration is now supplied by `MYSQLD_EXPORTER_PASSWORD` and command line arguments. Signed-off-by: Mattias Ängehov <mattias.angehov@castoredc.com>
- Loading branch information
1 parent
c7ab579
commit 593b009
Showing
13 changed files
with
640 additions
and
234 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,229 @@ | ||
| // Copyright 2022 The Prometheus Authors | ||
| // Licensed under the Apache License, Version 2.0 (the "License"); | ||
| // you may not use this file except in compliance with the License. | ||
| // You may obtain a copy of the License at | ||
| // | ||
| // http://www.apache.org/licenses/LICENSE-2.0 | ||
| // | ||
| // Unless required by applicable law or agreed to in writing, software | ||
| // distributed under the License is distributed on an "AS IS" BASIS, | ||
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| // See the License for the specific language governing permissions and | ||
| // limitations under the License. | ||
|
|
||
| package config | ||
|
|
||
| import ( | ||
| "crypto/tls" | ||
| "crypto/x509" | ||
| "fmt" | ||
| "net" | ||
| "os" | ||
| "sync" | ||
|
|
||
| "github.com/go-kit/log" | ||
| "github.com/go-kit/log/level" | ||
|
|
||
| "github.com/go-sql-driver/mysql" | ||
| "github.com/prometheus/client_golang/prometheus" | ||
|
|
||
| "gopkg.in/ini.v1" | ||
| ) | ||
|
|
||
| var ( | ||
| configReloadSuccess = prometheus.NewGauge(prometheus.GaugeOpts{ | ||
| Namespace: "mysqld_exporter", | ||
| Name: "config_last_reload_successful", | ||
| Help: "Mysqld exporter config loaded successfully.", | ||
| }) | ||
|
|
||
| configReloadSeconds = prometheus.NewGauge(prometheus.GaugeOpts{ | ||
| Namespace: "mysqld_exporter", | ||
| Name: "config_last_reload_success_timestamp_seconds", | ||
| Help: "Timestamp of the last successful configuration reload.", | ||
| }) | ||
|
|
||
| cfg *ini.File | ||
|
|
||
| opts = ini.LoadOptions{ | ||
| // Do not error on nonexistent file to allow empty string as filename input | ||
| Loose: true, | ||
| // MySQL ini file can have boolean keys. | ||
| AllowBooleanKeys: true, | ||
| } | ||
|
|
||
| err error | ||
| ) | ||
|
|
||
| type Config struct { | ||
| Sections map[string]MySqlConfig | ||
| } | ||
|
|
||
| type MySqlConfig struct { | ||
| User string `ini:"user"` | ||
| Password string `ini:"password"` | ||
| Host string `ini:"host"` | ||
| Port int `ini:"port"` | ||
| Socket string `ini:"socket"` | ||
| SslCa string `ini:"ssl-ca"` | ||
| SslCert string `ini:"ssl-cert"` | ||
| SslKey string `ini:"ssl-key"` | ||
| TlsInsecureSkipVerify bool `ini:"ssl-skip-verfication"` | ||
| } | ||
|
|
||
| type MySqlConfigHandler struct { | ||
| sync.RWMutex | ||
| TlsInsecureSkipVerify bool | ||
| Config *Config | ||
| } | ||
|
|
||
| func (ch *MySqlConfigHandler) GetConfig() *Config { | ||
| ch.RLock() | ||
| defer ch.RUnlock() | ||
| return ch.Config | ||
| } | ||
|
|
||
| func (ch *MySqlConfigHandler) ReloadConfig(filename string, mysqldAddress string, mysqldUser string, tlsInsecureSkipVerify bool, logger log.Logger) error { | ||
| var host, port string | ||
| defer func() { | ||
| if err != nil { | ||
| configReloadSuccess.Set(0) | ||
| } else { | ||
| configReloadSuccess.Set(1) | ||
| configReloadSeconds.SetToCurrentTime() | ||
| } | ||
| }() | ||
|
|
||
| if cfg, err = ini.LoadSources( | ||
| opts, | ||
| []byte("[client]\npassword = ${MYSQLD_EXPORTER_PASSWORD}\n"), | ||
| filename, | ||
| ); err != nil { | ||
| return fmt.Errorf("failed to load %s: %w", filename, err) | ||
| } | ||
|
|
||
| if host, port, err = net.SplitHostPort(mysqldAddress); err != nil { | ||
| return fmt.Errorf("failed to parse address: %w", err) | ||
| } | ||
|
|
||
| if clientSection := cfg.Section("client"); clientSection != nil { | ||
| if cfgHost := clientSection.Key("host"); cfgHost.String() == "" { | ||
| cfgHost.SetValue(host) | ||
| } | ||
| if cfgPort := clientSection.Key("port"); cfgPort.String() == "" { | ||
| cfgPort.SetValue(port) | ||
| } | ||
| if cfgUser := clientSection.Key("user"); cfgUser.String() == "" { | ||
| cfgUser.SetValue(mysqldUser) | ||
| } | ||
| } | ||
|
|
||
| cfg.ValueMapper = os.ExpandEnv | ||
| config := &Config{} | ||
| m := make(map[string]MySqlConfig) | ||
| for _, sec := range cfg.Sections() { | ||
| sectionName := sec.Name() | ||
|
|
||
| if sectionName == "DEFAULT" { | ||
| continue | ||
| } | ||
|
|
||
| mysqlcfg := &MySqlConfig{ | ||
| TlsInsecureSkipVerify: tlsInsecureSkipVerify, | ||
| } | ||
| if err != nil { | ||
| level.Error(logger).Log("msg", "failed to load config", "section", sectionName, "err", err) | ||
| continue | ||
| } | ||
|
|
||
| err = sec.StrictMapTo(mysqlcfg) | ||
| if err != nil { | ||
| level.Error(logger).Log("msg", "failed to parse config", "section", sectionName, "err", err) | ||
| continue | ||
| } | ||
| if err := mysqlcfg.validateConfig(); err != nil { | ||
| level.Error(logger).Log("msg", "failed to validate config", "section", sectionName, "err", err) | ||
| continue | ||
| } | ||
|
|
||
| m[sectionName] = *mysqlcfg | ||
| } | ||
| config.Sections = m | ||
| if len(config.Sections) == 0 { | ||
| return fmt.Errorf("no configuration found") | ||
| } | ||
| ch.Lock() | ||
| ch.Config = config | ||
| ch.Unlock() | ||
| return nil | ||
| } | ||
|
|
||
| func (m MySqlConfig) validateConfig() error { | ||
| if m.User == "" { | ||
| return fmt.Errorf("no user specified in section or parent") | ||
| } | ||
| if m.Password == "" { | ||
| return fmt.Errorf("no password specified in section or parent") | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (m MySqlConfig) FormDSN(target string) (string, error) { | ||
| var dsn, host, port string | ||
|
|
||
| user := m.User | ||
| password := m.Password | ||
| if target == "" { | ||
| host := m.Host | ||
| port := m.Port | ||
| socket := m.Socket | ||
| if socket != "" { | ||
| dsn = fmt.Sprintf("%s:%s@unix(%s)/", user, password, socket) | ||
| } else { | ||
| dsn = fmt.Sprintf("%s:%s@tcp(%s:%d)/", user, password, host, port) | ||
| } | ||
| } else { | ||
| if host, port, err = net.SplitHostPort(target); err != nil { | ||
| return dsn, fmt.Errorf("failed to parse target: %s", err) | ||
| } | ||
| dsn = fmt.Sprintf("%s:%s@tcp(%s:%s)/", user, password, host, port) | ||
| } | ||
|
|
||
| if m.SslCa != "" { | ||
| if err := m.CustomizeTLS(); err != nil { | ||
| err = fmt.Errorf("failed to register a custom TLS configuration for mysql dsn: %w", err) | ||
| return dsn, err | ||
| } | ||
| dsn = fmt.Sprintf("%s?tls=custom", dsn) | ||
| } | ||
|
|
||
| return dsn, nil | ||
| } | ||
|
|
||
| func (m MySqlConfig) CustomizeTLS() error { | ||
| var tlsCfg tls.Config | ||
| caBundle := x509.NewCertPool() | ||
| pemCA, err := os.ReadFile(m.SslCa) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if ok := caBundle.AppendCertsFromPEM(pemCA); ok { | ||
| tlsCfg.RootCAs = caBundle | ||
| } else { | ||
| return fmt.Errorf("failed parse pem-encoded CA certificates from %s", m.SslCa) | ||
| } | ||
| if m.SslCert != "" && m.SslKey != "" { | ||
| certPairs := make([]tls.Certificate, 0, 1) | ||
| keypair, err := tls.LoadX509KeyPair(m.SslCert, m.SslKey) | ||
| if err != nil { | ||
| return fmt.Errorf("failed to parse pem-encoded SSL cert %s or SSL key %s: %w", | ||
| m.SslCert, m.SslKey, err) | ||
| } | ||
| certPairs = append(certPairs, keypair) | ||
| tlsCfg.Certificates = certPairs | ||
| } | ||
| tlsCfg.InsecureSkipVerify = m.TlsInsecureSkipVerify | ||
| mysql.RegisterTLSConfig("custom", &tlsCfg) | ||
| return nil | ||
| } |
Oops, something went wrong.