一、背景
最近在学习springCloud,自己做了点使用搭建,简单试用,学习心得供初学者参考,希望有帮助。
二、admin
在搭建学习couldAlibaba之前,先学习一下actuator和admin,大家对埋点和CS架构交互有所了解。
Spring Boot Admin用于对 Spring Boot 应用的管理和监控,Spring Boot Admin 分为服务端(spring-boot-admin-server)和客户端(spring-boot-admin-client),服务端和客户端之间采用 http 通讯方式实现数据交互;单体项目中需要整合 spring-boot-admin-client 才能让应用实现管理和监控,spring-boot-actuator用于暴露服务埋点数据,让配合admin更好的监听服务,在阿里云中actuator也是常用的组件。
创建admin服务端项目:
- 引入依赖
<!-- admin 服务监控注册 server -->
<dependency>
<groupId>de.codecentric</groupId>
<artifactId>spring-boot-admin-starter-server</artifactId>
</dependency>
<!-- security -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
- 添加注解标注该服务为AdminServer @EnableAdminServer
/**
* @author len99
* 入口类
*/
@SpringBootApplication
@EnableAdminServer
//@EnableConfigServer // @EnableConfigServer与@EnableAdminServer 不能同时存在,这是个bug~~~~
public class ApplicationServerStarter {
public static void main(String[] args) {
SpringApplication.run(ApplicationServerStarter.class, args);
System.out.println("Start Server ------------------");
}
}
- spring security安全配置类SecurityConfig
package com.spring.cloud.admin.serve.config;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
import org.springframework.security.web.csrf.CookieCsrfTokenRepository;
@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
private String adminContextPath = "";
@Override
protected void configure(HttpSecurity http) throws Exception {
SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
successHandler.setTargetUrlParameter("redirectTo");
successHandler.setDefaultTargetUrl(adminContextPath + "/");
http.authorizeRequests() // 1. 配置所有静态资源和登录页可以公开访问(匿名访问)
// 1. 配置所有静态资源和登录页可以公开访问(匿名访问)
.antMatchers(adminContextPath + "/assets/**").permitAll()
.antMatchers(adminContextPath + "/login").permitAll()
.anyRequest().authenticated()
.and()
// 2. 配置登录和登出路径
.formLogin().loginPage(adminContextPath + "/login").successHandler(successHandler).and()
.logout().logoutUrl(adminContextPath + "/logout").and()
// 3. 开启 http basic 支持,客户端注册时需要使用
.httpBasic()
.and()
.csrf()
// 4. 开启基于 Cookie 的 CSRF 保护
.csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
// 5. 忽略这些路径的 CSRF 保护以便客户端注册
.ignoringAntMatchers(
adminContextPath + "/instances",
adminContextPath + "/actuator/**"
);
}
}
- 配置application.yml
server: #Server
port: 8081
spring:
application:
name: Server
security: #springSecurity安全框架设置登陆用户信息
user:
name: admin
password: admin
- 进行测试
启动springboot项目,项目端口为8081,访问http://localhost:8081/applications由于没有服务监听,监听数据为空
创建admin客服端项目:
- 引入依赖
<!-- actuator 端点暴露供admin抓取监控 -->
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-actuator</artifactId>
</dependency>
<!-- admin 服务监控注册 -->
<dependency>
<groupId>de.codecentric</groupId>
<artifactId>spring-boot-admin-starter-client</artifactId>
<version>2.2.1</version>
</dependency>
- 编写application.yml文件
server:
port: 9001
spring:
application:
name: Client
boot:
admin:
client:
# 配置 Admin Server(服务端的名字)
url: http://localhost:8081
username: admin
password: admin
# 开放端点用于 SpringBoot Admin 的监控
management:
endpoints:
web:
exposure:
include: '*'
- 进行测试
启动springboot项目,访问http://localhost:8081/applications发现监听新的服务实例
转载于: https://blog.youkuaiyun.com/m0_52462015/article/details/121183859