Jaeger over YDB Backend

Jaeger is an open-source platform for distributed tracing. Jaeger over YDB Backend enables you to monitor request status and debug distributed microservice application systems after faults. Jaeger uses Yandex Managed Service for YDB to store data.

1. Install the jq utility for JSON filtering:

   sudo apt update && sudo apt install jq
   

2. To enable cluster pods to connect to YDB, configure security groups. Add a rule for incoming traffic:

   • Port range: 2135
   • Protocol: TCP
   • Source: Security group
   • Security group: `Self```

3. Create a database with a suitable configuration, selecting Dedicated as your database type.

4. Create a directory named jaeger.

5. Create a service account key and save it to your local machine:

   yc iam key create \
      --service-account-id <service account ID> \
      --folder-id <folder ID> \
      --cloud-id <cloud ID> \
      --description jaeger-over-ydb  \
      --format json \
      -o key.json
   

6. Save the service account key in Base64 format:

   jq -r .private_key key.json > key.pem
   

7. Configure the application:

   • Namespace: Select a namespace or create a new one.
   • Application name: Specify the app name.
   • YDB endpoint: Specify the YDB endpoint name, e.g., lb.etnk1hv0jol3cu5pojp7.ydb.mdb.yandexcloud.net:2135.
   • Database: Specify the database name, e.g., /ru-central1/b1gkgm9daf4605njnmn8/etnk2hv0jol5cu5pojp7.
   • Database directory: jaeger.
   • Use metadata to authenticate from inside a VM: Select this option if authentication in the virtual machine is required.
   • Service account key ID: Specify the service account key ID you obtained previously.
   • Service account key: Specify the service account ID you obtained previously.
   • Service account private key: Copy the contents of the key.pem file to this field.
   • Install jaeger-agent: Select this option to install jaeger-agent.

8. Click Install.

9. Wait for the application to change its status to Deployed.

Jaeger does not provide any native authentication features in its UI. Install the oAuth2 Sidecar plugin to enable authentication or limit the access to the UI at the network or proxy level.

• Handling a large number of external and internal queries.
• Monitoring the performance of microservice applications.
• Tracking failures and analyzing their causes.

Yandex Cloud technical support is available 24/7. The types of requests you can submit and the appropriate response time depend on your pricing plan. You can switch to the paid support plan in the management console. You can learn more about the technical support terms here.