mirror of
https://github.com/helm/charts.git
synced 2026-08-23 22:37:45 +00:00
* Allow to add more secrets Allow to add an then mount secrets For example certficates Signed-off-by: Pawel Kalemba <pawel.kalemba@corp.ovh.com> * Lint code ,add space as requested Signed-off-by: Pawel Kalemba <pawel.kalemba@corp.ovh.com>
188 lines
5.3 KiB
YAML
188 lines
5.3 KiB
YAML
image:
|
|
repository: docker.elastic.co/beats/filebeat-oss
|
|
tag: 7.0.1
|
|
pullPolicy: IfNotPresent
|
|
|
|
config:
|
|
filebeat.config:
|
|
modules:
|
|
path: ${path.config}/modules.d/*.yml
|
|
# Reload module configs as they change:
|
|
reload.enabled: false
|
|
|
|
processors:
|
|
- add_cloud_metadata:
|
|
|
|
filebeat.inputs:
|
|
- type: log
|
|
enabled: true
|
|
paths:
|
|
- /var/log/*.log
|
|
- /var/log/messages
|
|
- /var/log/syslog
|
|
- type: docker
|
|
containers.ids:
|
|
- "*"
|
|
processors:
|
|
- add_kubernetes_metadata:
|
|
in_cluster: true
|
|
- drop_event:
|
|
when:
|
|
equals:
|
|
kubernetes.container.name: "filebeat"
|
|
|
|
output.file:
|
|
path: "/usr/share/filebeat/data"
|
|
filename: filebeat
|
|
rotate_every_kb: 10000
|
|
number_of_files: 5
|
|
|
|
# When a key contains a period, use this format for setting values on the command line:
|
|
# --set config."http\.enabled"=true
|
|
http.enabled: true
|
|
http.port: 5066
|
|
|
|
# If overrideConfig is not empty, filebeat chart's default config won't be used at all.
|
|
overrideConfig: {}
|
|
|
|
# Path on the host to mount to /usr/share/filebeat/data in the container.
|
|
data:
|
|
hostPath: /var/lib/filebeat
|
|
|
|
# Upload index template to Elasticsearch if Logstash output is enabled
|
|
# https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html
|
|
# List of Elasticsearch hosts
|
|
indexTemplateLoad: []
|
|
# - elasticsearch:9200
|
|
|
|
# List of beat plugins
|
|
plugins: []
|
|
# - kinesis.so
|
|
|
|
# pass custom command. This is equivalent of Entrypoint in docker
|
|
command: []
|
|
|
|
# pass custom args. This is equivalent of Cmd in docker
|
|
args: []
|
|
|
|
# A list of additional environment variables
|
|
extraVars: []
|
|
# - name: TEST1
|
|
# value: TEST2
|
|
# - name: TEST3
|
|
# valueFrom:
|
|
# configMapKeyRef:
|
|
# name: configmap
|
|
# key: config.key
|
|
|
|
# Add additional volumes and mounts, for example to read other log files on the host
|
|
extraVolumes: []
|
|
# - hostPath:
|
|
# path: /var/log
|
|
# name: varlog
|
|
extraVolumeMounts: []
|
|
# - name: varlog
|
|
# mountPath: /host/var/log
|
|
# readOnly: true
|
|
extraSecrets: {}
|
|
# secret: "TEST1"
|
|
|
|
extraInitContainers: []
|
|
# - name: echo
|
|
# image: busybox
|
|
# imagePullPolicy: Always
|
|
# args:
|
|
# - echo
|
|
# - hello
|
|
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 200Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
|
|
priorityClassName: ""
|
|
|
|
nodeSelector: {}
|
|
|
|
annotations: {}
|
|
|
|
tolerations: []
|
|
# - operator: Exists
|
|
|
|
affinity: {}
|
|
|
|
rbac:
|
|
# Specifies whether RBAC resources should be created
|
|
create: true
|
|
|
|
serviceAccount:
|
|
# Specifies whether a ServiceAccount should be created
|
|
create: true
|
|
# The name of the ServiceAccount to use.
|
|
# If not set and create is true, a name is generated using the fullname template
|
|
name:
|
|
|
|
## Specify if a Pod Security Policy for filebeat must be created
|
|
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
|
##
|
|
podSecurityPolicy:
|
|
enabled: False
|
|
annotations: {}
|
|
## Specify pod annotations
|
|
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#apparmor
|
|
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#seccomp
|
|
## Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/#sysctl
|
|
##
|
|
# seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'
|
|
# seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
|
|
# apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
|
|
|
|
privileged: false
|
|
|
|
## Add Elastic beat-exporter for Prometheus
|
|
## https://github.com/trustpilot/beat-exporter
|
|
## Dont forget to enable http on config.http.enabled (exposing filebeat stats)
|
|
monitoring:
|
|
enabled: true
|
|
serviceMonitor:
|
|
# When set true and if Prometheus Operator is installed then use a ServiceMonitor to configure scraping
|
|
enabled: true
|
|
# Set the namespace the ServiceMonitor should be deployed
|
|
# namespace: monitoring
|
|
# Set how frequently Prometheus should scrape
|
|
# interval: 30s
|
|
# Set path to beats-exporter telemtery-path
|
|
# telemetryPath: /metrics
|
|
# Set labels for the ServiceMonitor, use this to define your scrape label for Prometheus Operator
|
|
# labels:
|
|
image:
|
|
repository: trustpilot/beat-exporter
|
|
tag: 0.1.1
|
|
pullPolicy: IfNotPresent
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 200Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
|
|
# pass custom args. This is equivalent of Cmd in docker
|
|
args: []
|
|
|
|
## default is ":9479". If changed, need pass argument "-web.listen-address <...>"
|
|
exporterPort: 9479
|
|
## Filebeat service port, which exposes Prometheus metrics
|
|
targetPort: 9479
|