Attention Iron Bank Customers: On March 27, 2025, we are moving SBOM artifacts from the Anchore Scan job to the Build job to streamline the container hardening pipeline. If you currently download SBOMs from the Anchore Scan job, you can still get them from the Build job and from other sources, including IBFE and image attestations.
The default Promtail configuration winds up trying to ingest all logs on the host in /var/log. This seems a bit aggressive for the default and in a few cases, we saw Promtail not able to initially start due to OOMKilled errors. We got around this by pointing this to an empty directory /var/log/fake, as we really only care about what is in /var/log/pods in this case.
Hey @danny-radiusmethod we can maybe adjust the config so that extra portions mentioning /var/log can more easily be emptied out but we got a request in the past for explicitly adding /var/log
@danny-radiusmethod this issue has been inactive for 30 days and is being labelled as stale. If this issue is still required please take action by removing the stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 60 days.
@danny-radiusmethod this issue has been inactive for 60 days and is being labelled as marked-for-auto-close. If this issue is still required please take action by removing the stale and marked-for-auto-close labels and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 30 days.
@danny-radiusmethod this issue has been inactive for 30 days and is being labelled as stale. If this issue is still required please take action by removing the stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 60 days.