UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
values.yaml 4.67 KiB
{{- if .Values.fluentbit.enabled }}
{{- include "values-secret" (dict "root" $ "package" .Values.fluentbit "name" "fluentbit" "defaults" (include "bigbang.defaults.fluentbit" .)) }}
{{- end }}

{{- define "bigbang.defaults.fluentbit" -}}
{{- $disableDefault := dig "additionalOutputs" "disableDefault" false .Values.fluentbit.values }}

{{- if (not $disableDefault) }}
{{- if .Values.logging.enabled }}
env:
  - name: FLUENT_ELASTICSEARCH_PASSWORD
    valueFrom:
      secretKeyRef:
        name: logging-ek-es-elastic-user
        key: elastic

extraVolumes:
  - hostPath:
      path: /var/log/flb-storage/
      type: DirectoryOrCreate
    name: flb-storage
  - secret:
      secretName: logging-ek-es-http-certs-public
    name: elasticsearch-certs

extraVolumeMounts:
  - mountPath: /var/log/flb-storage/
    name: flb-storage
    readOnly: false
  - mountPath: /etc/elasticsearch/certs/
    name: elasticsearch-certs
{{- end }}
{{- if or .Values.logging.enabled .Values.loki.enabled }}
config:
  outputs: |
    {{- if .Values.logging.enabled }}
    [OUTPUT]
        Name                     es
        Match                    kube.*
        Host                     {{ dig "elasticsearch" "name" "logging-ek" .Values.fluentbit.values }}-es-http
        HTTP_User                elastic
        HTTP_Passwd              ${FLUENT_ELASTICSEARCH_PASSWORD}
        Logstash_Format          On
        Suppress_Type_Name       On
        Retry_Limit              False
        Replace_Dots             On
        tls                      On
        tls.verify               On
        tls.ca_file              /etc/elasticsearch/certs/ca.crt
        storage.total_limit_size {{ dig "storage" "total_limit_size" "10G" .Values.fluentbit.values }}
    [OUTPUT]
        Name                     es
        Match                    host.*
        Host                     {{ dig "elasticsearch" "name" "logging-ek" .Values.fluentbit.values }}-es-http
        HTTP_User                elastic
        HTTP_Passwd              ${FLUENT_ELASTICSEARCH_PASSWORD}
        Logstash_Format          On
        Suppress_Type_Name       On
        Logstash_Prefix          node
        Retry_Limit              False
        tls                      On
        tls.verify               On
        tls.ca_file              /etc/elasticsearch/certs/ca.crt
        storage.total_limit_size {{ dig "storage" "total_limit_size" "10G" .Values.fluentbit.values }}
    {{- end }}

    {{- if .Values.loki.enabled }}
    [OUTPUT]
        name                   loki
        match                  kube.*