Commit Graph

544 Commits

Author SHA1 Message Date
1bfb1edcf2 Version bump aws-efs-csi-driver 2021-03-22 11:14:27 +01:00
ed10df68a5 Version bump of kube-prometheus stack 2021-03-22 10:23:27 +01:00
e351a74eeb Some tool tweaks 2021-03-19 16:16:13 +01:00
d8994cead2 Add nodeAffinity to all logging components, add resources to fluent-bit, tuning 2021-03-19 16:15:58 +01:00
d51e3cb048 Kubelet tuning 2021-03-18 14:31:10 +01:00
1616dcba43 Bugfixes for control plane, proper calico cpu requests 2021-03-17 17:29:44 +01:00
355a090bf6 Updates for etcd 1.19 2021-03-15 11:51:56 +01:00
3ff1ee3244 Bump kiam-server memory limit 2021-03-11 09:05:26 +01:00
4f71b6a6cf Bump ECK operator to 1.4.1 2021-03-11 09:00:47 +01:00
b070416e45 Reduce fluentd chunk size and increase retry timeout 2021-03-10 10:44:51 +01:00
815a8b54f9 Update fluentd.patch for helm chart 2021-03-10 10:34:17 +01:00
54fad23983 Upgrade fluentd to use new upstream helm and image 2021-03-10 10:32:12 +01:00
b0d0bc61b4 Disable metadata via kubelet for now 2021-03-09 10:33:40 +01:00
46303eaff9 Remove unnecessary docker mount 2021-03-07 12:47:06 +01:00
16998a5243 Switch fluent-bit to use kubelet rather than kube-api 2021-03-07 12:38:53 +01:00
2d10657050 Initial aws-node-termination still disabled, local-volume tweaks for new tag layout 2021-03-05 18:18:45 +01:00
5d57cf5480 Version upgrade ES/Kibana and Fluentbit, various tunings 2021-03-05 16:53:02 +01:00
f6abd9b894 remove cpu limit for aws-iam-auth, enable cpufs kubelet feature flag 2021-03-05 14:00:00 +01:00
b4ccbe6955 More request tuning for aws-ebs-csi 2021-03-05 13:58:54 +01:00
add271c447 aws-ebs-csi-driver version bump, remove cpu limts 2021-03-05 10:32:42 +01:00
ff3510ec4b remove default cpu limmits for kiam 2021-03-05 10:22:54 +01:00
1dd10cc1a8 aws-ebs-csi-driver version bump introducing readiness probes 2021-03-03 10:59:12 +01:00
1f6c8c21ba remove patch left overs 2021-03-02 11:37:02 +01:00
2f5af18b98 Slightly increase cpu limits for aws-ebs 2021-03-02 11:32:00 +01:00
b9af73a9ad Version bump charts 2021-03-02 11:28:13 +01:00
ef254a149b aws-ebs-csi-driver version bump and resource limits 2021-03-02 11:22:34 +01:00
ef75ae73f6 Istio version bump due to security release 2021-03-02 10:33:12 +01:00
8a8c4fbe66 Prometheus-stack version bump 2021-02-26 22:25:43 +01:00
44127fbbcb Minor version bump of aws-ebs-csi-driver to update livenessprobe 2021-02-26 01:18:32 +01:00
f4b3bc85c7 Fix gateway protocol 2021-02-26 00:35:21 +01:00
8613433699 Update ingress default config 2021-02-26 00:24:12 +01:00
322b9f6c2e Upgrade Istio to 1.9 2021-02-25 23:44:33 +01:00
01cab288cb Reduce loglevel for efs driver 2021-02-25 00:23:50 +01:00
ebdf680853 Version bump for aws-efs-csi-driver, use upstream helm chart 2021-02-25 00:17:50 +01:00
af6810ef6a Version bump for aws-ebs-csi driver, enable volume resize, snapshot, patch for loglevel and leader election 2021-02-24 20:36:34 +01:00
3383efd764 Version bump of ArgoCD required for Kube > 1.18 latest charts 2021-02-24 00:10:14 +01:00
af010a2033 Further tuning of fluentd throughput 2021-02-22 21:34:45 +01:00
bb6fda041d Fix kubelet config 2021-02-22 21:32:41 +01:00
3342ead3b5 Version bump cert-manager 2021-02-22 21:32:12 +01:00
9b823dc082 Make kubeadm config work on bare-metal, minor tuning 2021-02-22 14:41:32 +01:00
4fded1b668 Kubeadm chart for 1.19, improved tooling 2021-02-12 11:04:16 +00:00
0e0a9feb12 README updates 2021-01-26 13:47:33 +00:00
ff3ae1f44f Istio minor version bump 2021-01-26 12:54:56 +00:00
9786706542 Fix changed key for kiam 2021-01-21 13:35:20 +00:00
77a20df965 Version bump for aws-ebs-csi and kiam, ES bugfix bump, fluentd tuning 2021-01-21 12:31:06 +00:00
98cda93861 CI/CD tools update 2021-01-21 10:53:53 +00:00
92e2bc138e Reduce logLevel of prometheus adapter 2021-01-20 15:31:00 +00:00
06608bcd78 Reduce loglevel of prometheus adapter 2021-01-20 15:22:28 +00:00
a9d03f929f Allow custom memory overwrites for ES cluster 2021-01-18 17:18:30 +00:00
7641980b26 Add basic mapping for aws-iam-auth 2021-01-11 20:41:12 +00:00
99c9d5bac6 Split out crds for aws-iam-authenticator 2021-01-04 18:13:36 +00:00
5942e51741 Add aws-iam-authenticator support 2021-01-04 14:56:41 +00:00
05f4959064 Remove stable repo 2021-01-03 16:33:13 +01:00
e9f5686fc8 Integrate and patch prometheus-stack chart to customize alerts 2020-12-17 16:46:15 -08:00
8de14285ab Switch to gp3 as default EBS class, version bump for metrics components 2020-12-17 15:36:23 -08:00
34e9ec2b44 Remove repositories to make argo happy 2020-12-17 12:24:12 -08:00
c7d22dd631 Remove repositories to make argo happy 2020-12-17 12:22:48 -08:00
57b143f1c9 Re-add fluentd chart until we migrate off 2020-12-17 12:17:19 -08:00
c3f2c9d614 Istio version bump, ingress terminationgraceperiod patch, aws-ebs version bump 2020-12-16 03:40:14 -08:00
89c21cb1fe EBS driver version bump 2020-12-10 07:06:31 -08:00
cd561228e7 More logging tuning 2020-12-10 06:44:58 -08:00
c2fb56a0d8 More logging tuning 2020-12-10 06:36:26 -08:00
f1a6e7a3e8 Lua fix fluent-bit 2020-12-08 07:15:00 -08:00
6c7bd71e81 Integrare fluent-bit into logging to allow better config 2020-12-08 07:05:25 -08:00
59949b485b Use upstream released chart for aws-ebs-csi 2020-12-07 15:01:40 -08:00
7998d93d17 Fix empty CRDs, only deploy eck-operator if needed 2020-12-07 13:06:00 -08:00
99ceceda56 Re-enable geoip lookups 2020-12-07 04:33:33 -08:00
a6950196b4 Disable CRDs from eck-operator defaults 2020-12-05 14:16:33 -08:00
22fb93a7f2 Adjust argo ingnores for latest eck webhooks 2020-12-05 14:08:40 -08:00
ed72dd796b ECK fixes for Kube 1.18, Redis cluster support incl. Enyoy proxy 2020-12-04 06:05:35 -08:00
b4519fe055 Add helm version check to bootstrap.sh 2020-12-03 02:04:08 -08:00
0d2206e995 Minor version bump for redis, added redis-cluster support 2020-12-02 07:23:17 -08:00
f973a4e23c Switch all metrics logs to json 2020-12-02 06:24:07 -08:00
1715ba00d4 Fix service names in metrics 2020-12-02 04:30:17 -08:00
1ac2eddcea Add alertmanager istio config for metrics, metrics values reorg 2020-12-02 03:53:19 -08:00
8b048dd390 More fixes and upgrade docs 2020-12-01 07:46:04 -08:00
3497392c39 ArgoCd naming fixes 2020-11-30 09:30:06 -08:00
a23282bdf5 More fixes 2020-11-30 04:13:52 -08:00
85e89f768c cert-manager version bump, local-path-provisioner fixes 2020-11-30 11:34:44 +00:00
4bca9bd869 Add local-path-provisioner, re-org bootstrap 2020-11-30 01:52:11 -08:00
91c59e3560 Metrics update 2020-11-28 23:54:40 +00:00
bc7f4b08ed More bugfixes, ingress certs 2020-11-28 15:01:20 -08:00
7e1d26aa5c More fixes 2020-11-27 08:19:44 -08:00
7df88c8883 Add missing .helmignore 2020-11-26 15:31:40 -08:00
ca2d2763d3 Latest fixes, fluent-bit version bump 2020-11-26 09:37:10 -08:00
74e07acf13 More fixes now adding ArgoCD 2020-11-26 05:21:10 -08:00
8b4a2bd920 Another argo tweak 2020-11-24 07:29:38 -08:00
486ea0fa56 Bug fixes and argo tweaks 2020-11-24 07:18:14 -08:00
0a1cb7a07a Revert Kube version check to make argo work 2020-11-24 06:51:48 -08:00
33bf724618 First try adding argoCD day 2 2020-11-24 06:44:57 -08:00
f711655c58 Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
9d0e2f00a9 First steps of argoless bootstrap 2020-11-03 12:51:57 +00:00
073916903c Minor version bump for prometheus-stack, remove default CPU limit 2020-10-27 14:13:52 +00:00
7c945fbac7 Update docs, bump argo-cd parallel jobs 2020-10-27 11:54:44 +00:00
10e59e67e1 Remove argocd from control plane 2020-10-21 14:18:02 +01:00
6ca8df71ab Enable json logs for argo-cd finally 2020-10-21 13:29:49 +01:00
cf00ff3fd7 Bump argo-cd chart version 2020-10-21 13:14:23 +01:00
853edcb141 Bump argo-cd version 2020-10-21 13:12:23 +01:00
31bcd30c41 Revert more prometheus-adapter config 2020-10-21 13:05:08 +01:00
c486223699 Revert prometheus adapter changes 2020-10-21 12:51:15 +01:00
21a9816dea More EFS fixes, cert-manager version bump 2020-10-21 04:37:33 -07:00
46cf90068f Adjust prometheus URLs 2020-10-09 18:41:43 -07:00
7dbc97bcbc First stab at new prometheus charts 2020-10-09 17:58:44 -07:00
e5cb34c6af Cleanup 2020-10-09 12:38:20 -07:00
a903369121 Minor tweak to aws efs upate tooling 2020-10-09 11:15:19 -07:00
d925bfb3d5 Actually update the default version of aws ebs to 0.7.0 2020-10-09 11:14:51 -07:00
98f592cb99 AWS EBS driver version bump 2020-10-09 10:53:32 -07:00
ee5678b0eb Revert minimal kube version due to issues with argocd 2020-10-09 07:43:05 -07:00
8ae67df9d2 Add multi PV support to EFS 2020-10-09 07:30:25 -07:00
c2a6452f27 Update EFS tooling to track releases 2020-10-08 07:52:34 -07:00
6975e79fec Typo 2020-10-07 09:11:22 -07:00
9b4d49575b New Lua function to nest entries into kube.<namespace>.* 2020-10-07 09:09:24 -07:00
694d1b79ca fluent-bit tag improvements 2020-10-05 17:27:58 -07:00
e32d258986 Add some spaces 2020-10-05 09:03:47 -07:00
bddafc142e More logging fixes, try to decode json at the source 2020-10-05 09:01:50 -07:00
9252d3005a Disable json logging, crashed Argo 2020-10-05 08:43:18 -07:00
ca18407f62 Revert ArgoCd 1.7.7 2020-10-05 08:27:37 -07:00
2896c03e2a Latest argocd 2020-10-05 04:31:00 -07:00
19769f97d4 Derp 2020-10-05 04:09:03 -07:00
1429694e43 Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
3f054a96ec Disable borken json parsing for now 2020-10-02 14:46:07 -07:00
a2ba9fa085 Disable borken json parsing for now 2020-10-02 14:41:40 -07:00
f4068455de Fix the warning due to double CRDs 2020-10-02 10:44:15 -07:00
5904fcedf7 Istio version bump, make http10 support optional, enable redis,mysql protocol support 2020-10-02 10:38:09 -07:00
2ee31f60e2 Minor fluent-bit tuning 2020-10-01 12:32:21 -07:00
c6ae3d2461 Fluentd tuning 2020-10-01 10:14:04 -07:00
21c6b0ea58 Fluentd tuning 2020-10-01 10:11:48 -07:00
6003765dc9 Disable pipeline still cpu issues 2020-09-28 04:54:47 -07:00
0b50dbcfbe Reenable fluentd ingest pipeline again 2020-09-28 04:45:39 -07:00
a5952f850d Make the kiam annotate namespace job optional 2020-09-18 16:18:59 +01:00
4a918f6d83 Logging fixes for NOT using nameoverride 2020-09-18 16:12:52 +01:00
f753a1fc71 Slightly allow ArgoCD a bit more processing 2020-09-18 14:21:39 +01:00
85837c1666 Bump argocd to 1.7.5 as 1.7.4 has a deadlock CPU issue 2020-09-18 13:09:18 +01:00
b4c2195eef Add EnvoyFilter to enable tcp keepalive for all Ingress Envoys 2020-09-17 22:25:09 +01:00
182ae141a0 Revert TCP keepalive for fluentd listener 2020-09-17 19:44:34 +01:00
dd9e465ead Enable TCP keepalive for fluentd listener 2020-09-17 19:24:24 +01:00
47455bf4f0 TCP keepalive tuning for Istio 2020-09-17 17:54:57 +01:00
d3c8c92f9a Set global meshpolicy to prevent upgrade to http2 by default 2020-09-16 16:50:48 +01:00
ddb51294c9 Another argocd resource tweak 2020-09-15 11:48:07 +01:00
16bc828a0d Introduce resources for at least the argocd controller 2020-09-15 11:15:55 +01:00
900863acae Docs update 2020-09-14 17:26:39 +01:00
ce5290591f fluent-bit version bump 2020-09-14 17:26:19 +01:00
09d29f2704 New bootstrap flow 2020-09-14 16:06:53 +01:00
3a97bbed31 Latest deploy bootstrap tweaks 2020-09-14 15:24:40 +01:00
c347c56764 Disable default poddisruptionbudgets, replace with individual todo 2020-09-11 18:21:00 +01:00
4a405a0cbc Still double CRDs 2020-09-11 16:03:22 +01:00
fb5229613d Istio is really picky 2020-09-11 16:01:15 +01:00
f7ba0ffa33 Move ports > 1024 as we run non-root 2020-09-11 15:45:04 +01:00
530934e603 Set JSON for access logs 2020-09-11 15:39:47 +01:00
aa664bec01 Remove xp settings 2020-09-11 15:32:14 +01:00
7a93b34331 Re-enable JSON access logs 2020-09-11 15:28:51 +01:00
33339dbe21 Re-enable access logs 2020-09-11 15:22:34 +01:00
05d9e25f8d Remove deprecated fields for 1.7 2020-09-11 15:20:51 +01:00
6f60ec1dd9 Remove deprecated fields for 1.7 2020-09-11 15:18:30 +01:00
e9c0d35695 Remove deprecated fields for 1.7 2020-09-11 15:15:53 +01:00
203f236e23 Version bump Istio to 1.7.1 2020-09-11 15:06:38 +01:00
eba052f2f6 Remove double CRD for Istio 2020-09-11 14:42:25 +01:00
a09327f3f0 more istio cleanup 2020-09-11 12:37:22 +01:00
5c64544dcb more istio cleanup 2020-09-11 12:32:46 +01:00
72a2a40e81 more istio cleanup 2020-09-11 12:23:08 +01:00
2f7693388e Minot istio tweaks 2020-09-11 12:08:58 +01:00
d13fc9d519 Fix math in resources calc 2020-09-11 11:07:49 +01:00
e56d0661d6 Make ES heap configurable, set resources accordingly 2020-09-11 11:00:51 +01:00
4cea722fd4 Istio version bump to 1.6.9 2020-09-10 16:44:49 +01:00
790badc1cc Add resources to Kiam 2020-09-10 14:22:47 +01:00
f99cb5b21b Another prometheus resources tweak to prevent being killed during restarts 2020-09-10 14:09:23 +01:00
db5e587070 Adjust and limit Prometheus resources 2020-09-10 14:01:28 +01:00
71de050f9e ArgoCD version bump to 1.7.4 2020-09-10 13:44:48 +01:00
c9b830f727 Change log tag for audit log to not collide with regular tags 2020-09-09 20:59:03 +01:00
122cf5bd52 Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00
9e043a6241 Dont remove other fields for valid json 2020-09-08 15:41:20 +01:00
da503ab38c Fix fluentd parsing of json 2020-09-08 15:34:16 +01:00
a1af1a2753 Fix fluentd typo 2020-09-08 15:07:17 +01:00
3b438711dc Update fluentd to latest quay.io image, add json parser for message 2020-09-08 15:05:31 +01:00
b7feeae83c Remove CRD property to fix OutofSync Argo 2020-09-08 13:44:31 +01:00
9e0e819fd6 Handle empty message events 2020-09-08 13:40:09 +01:00
e09935a819 Add Lua functions to reassemble partial cri-o logs 2020-09-08 13:12:21 +01:00
6b1b02a743 Fluent-bit version bump and support for api audit logs 2020-09-08 12:40:28 +01:00
63537919a4 Move scrape username to its own secret as eck operator cleans up otherwise 2020-09-04 01:13:39 +01:00
3fb65140af Enabled scraping etcd 2020-09-02 15:05:57 +01:00
42b792bb4b More fluentd tuning 2020-08-27 01:13:34 +01:00
e2d560c881 Disable ingest pipeline until we know what breaks / jams in ES 2020-08-27 01:03:35 +01:00
7f540d57db Revert ES fixes as servicemonitor is retarted 2020-08-26 23:02:47 +01:00
ea3432445e Hardcode es user for now 2020-08-26 22:50:51 +01:00
f9821762f7 fluentd / ES fixes 2020-08-26 18:13:21 +01:00
c78e9c04ce Fix default value 2020-08-25 14:46:22 +01:00
74abf0fbb3 Make Istio Ingress hosts specific matching the cert 2020-08-25 14:45:56 +01:00
31aa92a971 Revert default fluentd image, latest has issues 2020-08-24 11:38:47 +01:00
e4c478ed19 Increase default read-timeout for fluentd 2020-08-23 17:47:28 +01:00
8b5d9ad785 Use quay.io fluentd-es image until we roll our own 2020-08-23 17:41:37 +01:00
80867bd1c2 Fix default fluentd hostname 2020-08-23 15:50:14 +01:00
2d58d73798 Remove Cri parser as it is already incl. upstream now 2020-08-22 19:24:58 +01:00
93edcec5a2 Update docs 2020-08-22 18:27:31 +01:00
be346b592f Add fluent-bit support to kuberzero-logging, istio fixes 2020-08-22 18:27:18 +01:00
47fa523694 Refactor argo apps factory 2020-08-21 20:39:55 +01:00
3cfa3512e6 Switch istio ingress to http healthchecks, more tuning 2020-08-21 14:17:47 +01:00
5dac264e17 Also apply improved healthcehck handling and draining to public ingress 2020-08-20 18:32:01 +01:00
bdc9687bc3 Apply graceful shutdown fixes interim like Contour 2020-08-20 17:38:18 +01:00
89d765dc53 Add graceful shutdown to Ingress gateway, might need istio 1.7 to actually work though 2020-08-20 16:55:47 +01:00
225526869e Set Istio idle timeout to 1h 2020-08-20 16:12:41 +01:00