Commit Graph

302 Commits

Author SHA1 Message Date
Stefan Reimer 09d29f2704 New bootstrap flow 2020-09-14 16:06:53 +01:00
Stefan Reimer 3a97bbed31 Latest deploy bootstrap tweaks 2020-09-14 15:24:40 +01:00
Stefan Reimer c347c56764 Disable default poddisruptionbudgets, replace with individual todo 2020-09-11 18:21:00 +01:00
Stefan Reimer 4a405a0cbc Still double CRDs 2020-09-11 16:03:22 +01:00
Stefan Reimer fb5229613d Istio is really picky 2020-09-11 16:01:15 +01:00
Stefan Reimer f7ba0ffa33 Move ports > 1024 as we run non-root 2020-09-11 15:45:04 +01:00
Stefan Reimer 530934e603 Set JSON for access logs 2020-09-11 15:39:47 +01:00
Stefan Reimer aa664bec01 Remove xp settings 2020-09-11 15:32:14 +01:00
Stefan Reimer 7a93b34331 Re-enable JSON access logs 2020-09-11 15:28:51 +01:00
Stefan Reimer 33339dbe21 Re-enable access logs 2020-09-11 15:22:34 +01:00
Stefan Reimer 05d9e25f8d Remove deprecated fields for 1.7 2020-09-11 15:20:51 +01:00
Stefan Reimer 6f60ec1dd9 Remove deprecated fields for 1.7 2020-09-11 15:18:30 +01:00
Stefan Reimer e9c0d35695 Remove deprecated fields for 1.7 2020-09-11 15:15:53 +01:00
Stefan Reimer 203f236e23 Version bump Istio to 1.7.1 2020-09-11 15:06:38 +01:00
Stefan Reimer eba052f2f6 Remove double CRD for Istio 2020-09-11 14:42:25 +01:00
Stefan Reimer a09327f3f0 more istio cleanup 2020-09-11 12:37:22 +01:00
Stefan Reimer 5c64544dcb more istio cleanup 2020-09-11 12:32:46 +01:00
Stefan Reimer 72a2a40e81 more istio cleanup 2020-09-11 12:23:08 +01:00
Stefan Reimer 2f7693388e Minot istio tweaks 2020-09-11 12:08:58 +01:00
Stefan Reimer d13fc9d519 Fix math in resources calc 2020-09-11 11:07:49 +01:00
Stefan Reimer e56d0661d6 Make ES heap configurable, set resources accordingly 2020-09-11 11:00:51 +01:00
Stefan Reimer 4cea722fd4 Istio version bump to 1.6.9 2020-09-10 16:44:49 +01:00
Stefan Reimer 790badc1cc Add resources to Kiam 2020-09-10 14:22:47 +01:00
Stefan Reimer f99cb5b21b Another prometheus resources tweak to prevent being killed during restarts 2020-09-10 14:09:23 +01:00
Stefan Reimer db5e587070 Adjust and limit Prometheus resources 2020-09-10 14:01:28 +01:00
Stefan Reimer 71de050f9e ArgoCD version bump to 1.7.4 2020-09-10 13:44:48 +01:00
Stefan Reimer c9b830f727 Change log tag for audit log to not collide with regular tags 2020-09-09 20:59:03 +01:00
Stefan Reimer 122cf5bd52 Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00
Stefan Reimer 9e043a6241 Dont remove other fields for valid json 2020-09-08 15:41:20 +01:00
Stefan Reimer da503ab38c Fix fluentd parsing of json 2020-09-08 15:34:16 +01:00
Stefan Reimer a1af1a2753 Fix fluentd typo 2020-09-08 15:07:17 +01:00
Stefan Reimer 3b438711dc Update fluentd to latest quay.io image, add json parser for message 2020-09-08 15:05:31 +01:00
Stefan Reimer b7feeae83c Remove CRD property to fix OutofSync Argo 2020-09-08 13:44:31 +01:00
Stefan Reimer 9e0e819fd6 Handle empty message events 2020-09-08 13:40:09 +01:00
Stefan Reimer e09935a819 Add Lua functions to reassemble partial cri-o logs 2020-09-08 13:12:21 +01:00
Stefan Reimer 6b1b02a743 Fluent-bit version bump and support for api audit logs 2020-09-08 12:40:28 +01:00
Stefan Reimer 63537919a4 Move scrape username to its own secret as eck operator cleans up otherwise 2020-09-04 01:13:39 +01:00
Stefan Reimer 3fb65140af Enabled scraping etcd 2020-09-02 15:05:57 +01:00
Stefan Reimer 42b792bb4b More fluentd tuning 2020-08-27 01:13:34 +01:00
Stefan Reimer e2d560c881 Disable ingest pipeline until we know what breaks / jams in ES 2020-08-27 01:03:35 +01:00
Stefan Reimer 7f540d57db Revert ES fixes as servicemonitor is retarted 2020-08-26 23:02:47 +01:00
Stefan Reimer ea3432445e Hardcode es user for now 2020-08-26 22:50:51 +01:00
Stefan Reimer f9821762f7 fluentd / ES fixes 2020-08-26 18:13:21 +01:00
Stefan Reimer c78e9c04ce Fix default value 2020-08-25 14:46:22 +01:00
Stefan Reimer 74abf0fbb3 Make Istio Ingress hosts specific matching the cert 2020-08-25 14:45:56 +01:00
Stefan Reimer 31aa92a971 Revert default fluentd image, latest has issues 2020-08-24 11:38:47 +01:00
Stefan Reimer e4c478ed19 Increase default read-timeout for fluentd 2020-08-23 17:47:28 +01:00
Stefan Reimer 8b5d9ad785 Use quay.io fluentd-es image until we roll our own 2020-08-23 17:41:37 +01:00
Stefan Reimer 80867bd1c2 Fix default fluentd hostname 2020-08-23 15:50:14 +01:00
Stefan Reimer 2d58d73798 Remove Cri parser as it is already incl. upstream now 2020-08-22 19:24:58 +01:00
Stefan Reimer 93edcec5a2 Update docs 2020-08-22 18:27:31 +01:00
Stefan Reimer be346b592f Add fluent-bit support to kuberzero-logging, istio fixes 2020-08-22 18:27:18 +01:00
Stefan Reimer 47fa523694 Refactor argo apps factory 2020-08-21 20:39:55 +01:00
Stefan Reimer 3cfa3512e6 Switch istio ingress to http healthchecks, more tuning 2020-08-21 14:17:47 +01:00
Stefan Reimer 5dac264e17 Also apply improved healthcehck handling and draining to public ingress 2020-08-20 18:32:01 +01:00
Stefan Reimer bdc9687bc3 Apply graceful shutdown fixes interim like Contour 2020-08-20 17:38:18 +01:00
Stefan Reimer 89d765dc53 Add graceful shutdown to Ingress gateway, might need istio 1.7 to actually work though 2020-08-20 16:55:47 +01:00
Stefan Reimer 225526869e Set Istio idle timeout to 1h 2020-08-20 16:12:41 +01:00
Stefan Reimer c5e0187475 Set Istio idle timeout 2020-08-20 15:55:49 +01:00
Stefan Reimer d49ff51379 Disable default syncPolicy, use values instead 2020-08-20 11:40:08 +01:00
Stefan Reimer e782303703 Revert to default images 2020-08-18 13:13:30 +01:00
Stefan Reimer fbc203a2c9 Fix istio to service mapping 2020-08-18 12:45:15 +01:00
Stefan Reimer 279dde5ee2 Revert ot quay image, disable plugins 2020-08-18 12:36:56 +01:00
Stefan Reimer 4a6cbfbbcf Disable persistence by default 2020-08-18 12:08:49 +01:00
Stefan Reimer e6e0aa103b Add missing fluentd secrets 2020-08-18 11:58:37 +01:00
Stefan Reimer 777a0d7f94 Disable statefulset for fluentd being broken upstream 2020-08-18 11:41:09 +01:00
Stefan Reimer 12abcacdd9 Add fluentd to logging 2020-08-18 11:34:34 +01:00
Stefan Reimer fba3e8bfc4 Make old ECK resources optional 2020-08-17 13:12:07 +01:00
Stefan Reimer 1398484af8 Make argocd metrics work 2020-08-16 19:25:07 +01:00
Stefan Reimer 0db65bd060 Wire up prometheus metrics for argo-cd 2020-08-16 15:49:57 +01:00
Stefan Reimer e8afc6ddbb EBS-CSI version bump, reduce ArgoCD concurrency to reduce load spikes, sync from 180s to 300s 2020-08-15 23:37:45 +01:00
Stefan Reimer 4b734dc1bc Add cert-manager state handling for argo 2020-08-15 15:59:57 +01:00
Stefan Reimer 03bab16aa8 Exlude stateuful service objects to prevent double scrapes 2020-08-15 14:49:30 +01:00
Stefan Reimer aac2e235f8 Exlude stateuful service objects to prevent double scrapes 2020-08-15 14:45:43 +01:00
Stefan Reimer a6eab7d24b Add label for servicemonitor 2020-08-15 14:33:41 +01:00
Stefan Reimer 1ae1aac294 More logging fixes 2020-08-15 14:25:07 +01:00
Stefan Reimer 5595fff159 Fix optional prometheus support 2020-08-15 13:24:14 +01:00
Stefan Reimer 0e2e8502ed More logging fixes 2020-08-14 23:02:30 +01:00
Stefan Reimer 15605d0cef Adjust scrape internal for kiam to match others, and servicemonitor for agents 2020-08-14 22:31:34 +01:00
Stefan Reimer 55b0f02394 Add proper label for kiam servicemonitors 2020-08-14 17:39:05 +01:00
Stefan Reimer a9cdc7109e Add elastic-system ns to kubezero 2020-08-14 17:12:06 +01:00
Stefan Reimer 30f6432e59 Bugfix for prometheus service for calico 2020-08-14 17:10:25 +01:00
Stefan Reimer f11e98d69e Bugfix release for Calico, README updates 2020-08-14 17:05:25 +01:00
Stefan Reimer 4f4fa92b6b More logging fixes... ready for first trial 2020-08-14 15:52:10 +01:00
Stefan Reimer 7eabb00e72 Various logging fixes to get a first version of ES and Kibana running 2020-08-13 19:44:50 +01:00
Stefan Reimer f703a6d7e1 Add rabbitmq ingress gateway def 2020-08-11 15:09:48 +01:00
Stefan Reimer 3464bae762 Add logging as default ns to look for servicemonitors 2020-08-10 13:53:41 +01:00
Stefan Reimer 51bef938f6 Make sure nodeselector is a string 2020-08-10 13:28:45 +01:00
Stefan Reimer e4193dca73 make nodeselector for private ingress configurable 2020-08-10 13:20:36 +01:00
Stefan Reimer eb4b102291 Version bump of aws-ebs csi driver to 0.6.0 2020-08-10 12:33:53 +01:00
Stefan Reimer 36edd7bb73 Update all charts to use latest lib 2020-08-07 17:02:22 +01:00
Stefan Reimer f43e078c57 New istio naming schema for virtualservices 2020-08-06 19:07:06 +01:00
Stefan Reimer 08a73b6e82 Various deps updates, Istio to 1.6.7 2020-08-06 18:43:59 +01:00
Stefan Reimer bf6c856153 Extend shared library for naming functions 2020-08-06 17:21:27 +00:00
Stefan Reimer 58bf565359 Add default labels 2020-08-06 17:15:32 +00:00
Stefan Reimer d34536e9e2 Add latest docs 2020-08-06 12:38:40 +01:00
Stefan Reimer d532aaf0c9 Add optional istio ingress policies to metrics 2020-08-06 11:34:32 +00:00
Stefan Reimer 7cb0c4432c Add custom prometehus-operator settings 2020-08-06 11:52:16 +01:00
Stefan Reimer ae1d721a09 Controller and scheduler use self-signed certs 2020-08-05 15:58:37 +01:00
Stefan Reimer b541463829 Add cert-manager backup support in bootstrap, enable schedule and controller metrics 2020-08-05 15:42:15 +01:00