docker - Docker 的 Google Cloud Logging 驱动程序

Question

我无法验证谷歌云驱动程序 gcplogs尽管我已经设置了环境变量 GOOGLE_APPLICATION_CREDENTIALS，但对于 Docker 来说到我的服务帐户的 JSON 凭据所在的路径/文件。错误消息如下:

ERROR: for oncrm_oncrm_1  Cannot start service oncrm: failed to initialize logging driver: google.DefaultTokenSource: google: could not find default credentials. See https://developers.google.com/accounts/docs/application-default-credentials for more information.

我在 docker-compose 上使用的配置是:

logging:
      driver: gcplogs
      options:
        gcp-project: "gcloud-project-id"
        gcp-meta-name: "prod-helpsec-01"
        labels: "app"

我试图运行 docker 容器的环境是:

docker-ce v18.03

docker-compose v1.21.0

Ubuntu 17.10

Answer 1

google.DefaultTokenSource: google: could not find default credentials. See https://developers.google.com/accounts/docs/application-default-credentials for more information.

当我使用 运行 docker 服务时，我遇到了与上述相同的问题gcplogs 日志驱动程序。

这是我的问题解决方案:

在主机上:

sudo mkdir -p /etc/systemd/system/docker.service.d

创建文件:

/etc/systemd/system/docker.service.d/docker-service-override.conf

有了这个内容:

[Service]
Environment="GOOGLE_APPLICATION_CREDENTIALS=/root/gcp-logging-service-cridentials.json"

重启docker服务:

sudo systemctl daemon-reload
sudo systemctl restart docker

有用链接:

https://cloud.google.com/docs/authentication/getting-started

https://docs.docker.com/config/daemon/systemd

https://docs.docker.com/config/containers/logging/gcplogs/