# use this for backwards compatability # fullnameOverride: "" eck-operator: enabled: false installCRDs: false tolerations: - key: node-role.kubernetes.io/master effect: NoSchedule nodeSelector: node-role.kubernetes.io/master: "" # Version for ElasticSearch and Kibana have to match so we define it at top-level version: 7.11.1 elastic_password: "" # super_secret_elastic_password es: nodeSets: [] #- count: 2 # storage: # size: 16Gi # class: local-sc-xfs # zone: us-west-2a s3Snapshot: enabled: false iamrole: "" # INSERT_CLOUDFORMATION_OUTPUT_ElasticSearchSnapshots prometheus: false kibana: count: 1 #servicename: kibana.example.com istio: enabled: false gateway: "istio-system/ingressgateway" url: "" # kibana.example.com fluentd: enabled: false image: repository: fluent/fluentd-kubernetes-daemonset tag: v1.12-debian-elasticsearch7-1 istio: enabled: false kind: Deployment replicaCount: 1 #plugins: #- fluent-plugin-s3 service: ports: - name: tcp-forward protocol: TCP containerPort: 24224 - name: http-fluentd protocol: TCP containerPort: 9880 metrics: serviceMonitor: enabled: false additionalLabels: release: metrics dashboards: enabled: false # No need for docker nor /var/log volumes: - name: etcfluentd-main configMap: name: fluentd-main defaultMode: 0777 - name: etcfluentd-config configMap: name: fluentd-config defaultMode: 0777 volumeMounts: - name: etcfluentd-main mountPath: /etc/fluent - name: etcfluentd-config mountPath: /etc/fluent/config.d/ resources: requests: cpu: 50m memory: 256Mi limits: memory: 1024Mi output: # Default should be "logging-kubezero-logging-es-http" if fullnameOverride is NOT used host: logging-es-http shared_key: "cloudbender" # OUTPUT_USER: elastic # OUTPUT_SSL_VERIFY: "false" env: - name: "FLUENTD_CONF" value: "../../etc/fluent/fluent.conf" # Same here the secret names change if fullnameOverride is not used !! - name: OUTPUT_PASSWORD valueFrom: secretKeyRef: name: logging-es-elastic-user key: elastic fileConfigs: 00_system.conf: |- workers 2 01_sources.conf: |- @type http @label @KUBERNETES port 9880 bind 0.0.0.0 keepalive_timeout 30 @type forward @label @KUBERNETES port 24224 bind 0.0.0.0 # skip_invalid_event true send_keepalive_packet true self_hostname "#{ENV['HOSTNAME']}" shared_key {{ .Values.shared_key }} 02_filters.conf: |- 04_outputs.conf: |- fluent-bit: enabled: false serviceMonitor: enabled: true selector: release: metrics tolerations: - key: node-role.kubernetes.io/master effect: NoSchedule config: output: host: logging-fluentd sharedKey: cloudbender tls: false input: memBufLimit: 16MB refreshInterval: 10 logLevel: warn flushInterval: 5 #extraRecords: # source.clustername: MyKubeCluster service: | [SERVICE] Flush {{ .Values.config.flushInterval }} Daemon Off Log_Level {{ .Values.config.logLevel }} Parsers_File parsers.conf Parsers_File custom_parsers.conf HTTP_Server On HTTP_Listen 0.0.0.0 HTTP_Port {{ .Values.service.port }} inputs: | [INPUT] Name tail Path /var/log/containers/*.log Parser cri-log Tag cri.* Skip_Long_Lines On DB /var/log/flb_kube.db DB.Sync Normal {{- with .Values.config.input }} Mem_Buf_Limit {{ default "16MB" .memBufLimit }} Refresh_Interval {{ default 10 .refreshInterval }} {{- end }} filters: | [FILTER] Name lua Match cri.* script /fluent-bit/scripts/kubezero.lua call reassemble_cri_logs [FILTER] Name kubernetes Match cri.* Merge_Log On Merge_Log_Key kube Kube_Tag_Prefix cri.var.log.containers. Keep_Log Off K8S-Logging.Parser Off K8S-Logging.Exclude Off #Use_Kubelet true #Kubelet_Port 10250 {{- if index .Values "config" "extraRecords" }} [FILTER] Name record_modifier Match cri.* {{- range $k,$v := index .Values "config" "extraRecords" }} Record {{ $k }} {{ $v }} {{- end }} {{- end }} [FILTER] Name rewrite_tag Match cri.* Emitter_Name kube_tag_rewriter Rule logtag F kube.$kubernetes['namespace_name'].$kubernetes['container_name'] false [FILTER] Name lua Match kube.* script /fluent-bit/scripts/kubezero.lua call nest_k8s_ns outputs: | [OUTPUT] Match * Name forward Host {{ .Values.config.output.host }} Port 24224 Shared_Key {{ .Values.config.output.sharedKey }} tls {{ ternary "on" "off" .Values.config.output.tls }} Send_options true Require_ack_response true customParsers: | [PARSER] Name cri-log Format regex Regex ^(?