mirror of
https://github.com/amkartashov/gf-k8s.git
synced 2026-01-11 01:49:44 +00:00
105 lines
3 KiB
YAML
105 lines
3 KiB
YAML
# don't install as graylog deps, because versions are outdated
|
|
tags:
|
|
install-elasticsearch: false
|
|
install-mongodb: false
|
|
|
|
mongodb:
|
|
nameOverride: mongodb
|
|
fullnameOverride: mongodb
|
|
usePassword: false
|
|
persistence:
|
|
existingClaim: mongodb
|
|
|
|
elasticsearch:
|
|
nameOverride: elasticsearch
|
|
fullnameOverride: elasticsearch
|
|
imageTag: '6.8.4'
|
|
replicas: 1
|
|
minimumMasterNodes: 1
|
|
volumeClaimTemplate:
|
|
volumeName: elasticsearch
|
|
|
|
fluent-bit:
|
|
nameOverride: fluent-bit
|
|
fullnameOverride: fluent-bit
|
|
input:
|
|
systemd:
|
|
enabled: false
|
|
filter:
|
|
mergeJSONLog: false
|
|
trackOffsets: true
|
|
backend:
|
|
# no support for gelf in chart, configure manually
|
|
type: none
|
|
extraEntries:
|
|
output: |
|
|
[OUTPUT]
|
|
Name gelf
|
|
Match kube.*
|
|
Host graylog-udp
|
|
Port 12201
|
|
Mode udp
|
|
Gelf_Short_Message_Key log
|
|
rawConfig: |
|
|
@INCLUDE fluent-bit-service.conf
|
|
@INCLUDE fluent-bit-input.conf
|
|
@INCLUDE fluent-bit-filter.conf
|
|
[FILTER]
|
|
Name nest
|
|
Match kube.*
|
|
Operation lift
|
|
Nested_under kubernetes
|
|
[FILTER]
|
|
Name modify
|
|
Match kube.*
|
|
Rename container_name container
|
|
Rename namespace_name namespace
|
|
Rename pod_name pod
|
|
@INCLUDE fluent-bit-output.conf
|
|
|
|
graylog:
|
|
nameOverride: graylog
|
|
fullnameOverride: graylog
|
|
graylog:
|
|
replicas: 1
|
|
persistence:
|
|
enabled: false
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt
|
|
nginx.ingress.kubernetes.io/auth-url: https://oauth2.gorilych.ru/oauth2/auth
|
|
nginx.ingress.kubernetes.io/auth-signin: https://oauth2.gorilych.ru/oauth2/start?rd=$scheme://$host$request_uri
|
|
nginx.ingress.kubernetes.io/auth-response-headers: X-Forwarded-Email,X-Forwarded-User,X-Roles
|
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
auth_request_set $name_upstream_1 $upstream_cookie_name_1;
|
|
auth_request_set $user $upstream_http_x_auth_request_user;
|
|
auth_request_set $email $upstream_http_x_auth_request_email;
|
|
proxy_set_header X-Forwarded-User $user;
|
|
proxy_set_header X-Forwarded-Email $email;
|
|
access_by_lua_block {
|
|
if ngx.var.name_upstream_1 ~= "" then
|
|
ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
|
|
end
|
|
}
|
|
hosts:
|
|
- graylog.gorilych.ru
|
|
tls:
|
|
- hosts:
|
|
- graylog.gorilych.ru
|
|
secretName: graylog-tls
|
|
input:
|
|
udp:
|
|
service:
|
|
type: ClusterIP
|
|
ports:
|
|
- name: gelf
|
|
port: 12201
|
|
mongodb:
|
|
uri: mongodb://mongodb:27017/graylog
|
|
elasticsearch:
|
|
hosts: http://elasticsearch-master:9200
|
|
plugins:
|
|
- name: graylog-plugin-auth-sso-3.1.0.jar
|
|
url: https://github.com/Graylog2/graylog-plugin-auth-sso/releases/download/3.1.0/graylog-plugin-auth-sso-3.1.0.jar
|
|
|