Jaeger over YDB Backend

Jaeger is an open-source distributed tracing platform. Jaeger over YDB Backend lets you monitor the status of queries and perform debugging after failures in distributed systems of microservice applications. Jaeger uses YDB to store data.

1. Install kubectl and configure it to work with your cluster.

2. For streaming JSON files, install jq:

   sudo apt update && sudo apt install jq
   

3. To allow cluster pods to connect to YDB, set up security groups. Add a rule for incoming traffic:

   • Port range: 2135.
   • Protocol: TCP.
   • Source type: Security group.
   • Security group: Current (Self).

4. Create a database in any suitable configuration with the database type set to Dedicated.

5. Create a directory named jaeger.

6. Create a service account key and save it to your local machine:

   yc iam key create \
      --service-account-id <service account ID> \
      --folder-id <folder ID> \
      --cloud-id <cloud ID> \
      --description jaeger-over-ydb  \
      --format json \
      -o key.json
   

7. Save the service account key in Base64 format:

   jq -r .private_key key.json > key.pem
   

8. Configure the application:

   • Namespace: Select a namespace or create a new one.
   • Application name: Enter an application name.
   • YDB endpoint: Name the YDB endpoint like lb.etnk1hv0jol3cu5pojp7.ydb.mdb.yandexcloud.net:2135.
   • Database: Name the database like /ru-central1/b1gkgm9daf4605njnmn8/etnk2hv0jol5cu5pojp7.
   • Database directory: jaeger.
   • Use the metadata service for authentication from inside a VM: Select this option if authentication from inside the VM is required.
   • Service account key ID: Specify the obtained service account key ID.
   • Service account key: Specify the obtained service account ID.
   • Service account private key: Copy the contents of the key.pem file to this field.
   • Install jaeger-agent: Select this option to install jaeger-agent.

9. Click Install.

Jaeger doesn’t provide built-in authentication tools in the user interface. Install the oAuth2 Sidecar plugin to enable authentication in the interface or restrict access to the interface at the network or proxy server level.

• Handling a large number of external and internal queries.
• Monitoring the performance of microservice applications.
• Tracking failures and analyzing their causes.

Yandex Cloud technical support is available to respond to requests 24 hours a day, 7 days a week. The types of requests handled and the relevant response times depend on your pricing plan. You can activate paid support in the management console. Learn more about requesting technical support.