mirror of
https://github.com/amkartashov/gf-k8s.git
synced 2026-01-11 01:49:44 +00:00
60 lines
2 KiB
YAML
60 lines
2 KiB
YAML
# don't install as graylog deps, because versions are outdated
|
|
tags:
|
|
install-elasticsearch: false
|
|
install-mongodb: false
|
|
|
|
mongodb:
|
|
nameOverride: mongodb
|
|
fullnameOverride: mongodb
|
|
usePassword: false
|
|
persistence:
|
|
existingClaim: mongodb
|
|
|
|
elasticsearch:
|
|
nameOverride: elasticsearch
|
|
fullnameOverride: elasticsearch
|
|
imageTag: '6.8.4'
|
|
replicas: 1
|
|
minimumMasterNodes: 1
|
|
volumeClaimTemplate:
|
|
volumeName: elasticsearch
|
|
|
|
graylog:
|
|
nameOverride: graylog
|
|
fullnameOverride: graylog
|
|
graylog:
|
|
replicas: 1
|
|
persistence:
|
|
enabled: false
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt
|
|
nginx.ingress.kubernetes.io/auth-url: https://oauth2.gorilych.ru/oauth2/auth
|
|
nginx.ingress.kubernetes.io/auth-signin: https://oauth2.gorilych.ru/oauth2/start?rd=$scheme://$host$request_uri
|
|
nginx.ingress.kubernetes.io/auth-response-headers: X-Forwarded-Email,X-Forwarded-User,X-Roles
|
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
auth_request_set $name_upstream_1 $upstream_cookie_name_1;
|
|
auth_request_set $user $upstream_http_x_auth_request_user;
|
|
auth_request_set $email $upstream_http_x_auth_request_email;
|
|
proxy_set_header X-Forwarded-User $user;
|
|
proxy_set_header X-Forwarded-Email $email;
|
|
access_by_lua_block {
|
|
if ngx.var.name_upstream_1 ~= "" then
|
|
ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
|
|
end
|
|
}
|
|
hosts:
|
|
- graylog.gorilych.ru
|
|
tls:
|
|
- hosts:
|
|
- graylog.gorilych.ru
|
|
secretName: graylog-tls
|
|
mongodb:
|
|
uri: mongodb://mongodb:27017/graylog
|
|
elasticsearch:
|
|
hosts: http://elasticsearch-master:9200
|
|
plugins:
|
|
- name: graylog-plugin-auth-sso-3.1.0.jar
|
|
url: https://github.com/Graylog2/graylog-plugin-auth-sso/releases/download/3.1.0/graylog-plugin-auth-sso-3.1.0.jar
|
|
|