github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/fluent-bit] allow collecting audit logs (#19598)

Browse Source 
* [fluent-bit] allow collecting audit logs

Signed-off-by: alejandroEsc <jaescobar.cell@gmail.com>

* fixed extranentry item

Signed-off-by: alejandroEsc <jaescobar.cell@gmail.com>
This commit is contained in:
Alejandro Escobar
2019-12-16 01:15:37 -08:00
committed by Kubernetes Prow Robot
parent 4d1eef4a81
commit 29596c6228
4 changed files with 39 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/fluent-bit/Chart.yaml
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: fluent-bit
version: 2.8.3
version: 2.8.4
appVersion: 1.3.2
description: Fast and Lightweight Log/Data Forwarder for Linux, BSD and OSX
keywords:
stable/fluent-bit/README.md
+9 -1
View File
@@ -88,7 +88,15 @@ The following table lists the configurable parameters of the Fluent-Bit chart an
| `parsers.json` | List of json parsers | `NULL` |
| `parsers.logfmt` | List of logfmt parsers | `NULL` |
| **General** |
| `annotations` | Optional deamonset set annotations | `NULL` |
| `annotations` | Optional deamonset set annotations | `NULL` |
| `audit.enable` | Enable collection of audit logs | `false` |
| `audit.input.memBufLimit` | Specify Mem_Buf_Limit in tail input | `35mb` |
| `audit.input.parser` | Specify Parser in tail input | `docker` |
| `audit.input.path` | Specify log file(s) through the use of common wildcards | `/var/log/kube-apiserver-audit.log` |
| `audit.input.bufferChunkSize` | Specify Buffer_Chunk_Size in tail | `2MB` |
| `audit.input.bufferMaxSize` | Specify Buffer_Max_Size in tail | `10MB` |
| `audit.input.skipLongLines` | Specify Skip_Long_Lines in tail | `On` |
| `audit.input.key` | Specify Key in tail | `kubernetes-audit` |
| `podAnnotations` | Optional pod annotations | `NULL` |
| `podLabels` | Optional pod labels | `NULL` |
| `fullConfigMap` | User has provided entire config (parsers + system) | `false` |
stable/fluent-bit/templates/config.yaml
+16
View File
@@ -53,6 +53,22 @@ data:
{{- end }}
{{ .Values.extraEntries.input | indent 8 }}
{{- if .Values.audit.enable }}
[INPUT]
Name tail
Path {{ .Values.audit.input.path }}
Parser {{ .Values.audit.input.parser }}
DB /var/log/audit.db
Tag audit.*
Refresh_Interval 5
Mem_Buf_Limit {{ .Values.audit.input.memBufLimit }}
Buffer_Chunk_Size {{ .Values.audit.input.bufferChunkSize }}
Buffer_Max_Size {{ .Values.audit.input.bufferMaxSize }}
Skip_Long_Lines {{ .Values.audit.input.skipLongLines}}
Key {{ .Values.audit.input.key}}
{{ .Values.extraEntries.audit | indent 8 }}
{{- end }}
fluent-bit-filter.conf: |
[FILTER]
Name kubernetes
stable/fluent-bit/values.yaml
+13
View File
@@ -162,6 +162,8 @@ rawConfig: |-
#
extraEntries:
input: |-
# # >=1 additional Key/Value entrie(s) for existing Input section
audit: |-
# # >=1 additional Key/Value entrie(s) for existing Input section
filter: |-
# # >=1 additional Key/Value entrie(s) for existing Filter section
@@ -236,6 +238,17 @@ input:
stripUnderscores: false
tag: host.*
audit:
enable: false
input:
memBufLimit: 35MB
parser: docker
path: /var/log/kube-apiserver-audit.log
bufferChunkSize: 2MB
bufferMaxSize: 10MB
skipLongLines: On
key: kubernetes-audit
filter:
kubeURL: https://kubernetes.default.svc:443
kubeCAFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt