shipping_openbao_logs #17
No reviewers
richardrobertreitz
Labels
No labels
No milestone
No project
No assignees
1 participant
No due date set.
Dependencies
No dependencies set.
Reference: DevFW-CICD/stacks#17
Loading…
Reference in a new issue
No description provided.
Delete branch "shipping_openbao_logs"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
- name: sidecar-container-alloy-config configMap: name: sidecar-container-alloy-config- name: grafana-alloy image: grafana/alloy:latest ports: - containerPort: 12345 volumeMounts: - name: sidecar-container-alloy-config mountPath: /etc/alloy subPath: config.yaml args: - --config.file=/etc/alloy/config.yaml- name: alloy-data emptyDir: {}runAsUser: 1000 fsGroup: 1000runAsGroup: 1000 runAsNonRoot: true runAsUser: 100# - name: alloy-data # mountPath: /var/lib/alloy/data# - name: alloy-data # mountPath: /var/lib/alloy/data # securityContext: # runAsUser: 0chmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.logchmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.log removedecho 'OpenBao has crashed - giving Alloy time to collect logs...' >> var/log/openbao.log; sleep 20; echo 'Sidecar exiting.'; exit 1;# echo 'OpenBao has crashed - giving Alloy time to collect logs...' >> var/log/openbao.log; # sleep 20; # echo 'Sidecar exiting.'; # exit 1;echo 'Hello' sleep 5; done "]chmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.logwhile true; do echo 'Hello' sleep 5; done "]while true; do echo 'Hello' sleep 5; done "]image: busybox command: ["sh", "-c", "chown -R 1000:1000 /var/log && chmod -R 775 /var/log"] securityContext: runAsUser: 0 volumeMounts: - mountPath: /var/log name: log-storageimage: busybox command: ["sh", "-c", "chown -R 1000:1000 /var/log && chmod -R 775 /var/log"] volumeMounts: - mountPath: /var/log name: log-storage- name: log-storage path: /var/log/testvolumeMounts: - name: log-storage mountPath: /var/log/test- name: log-storage path: /var/log/test- mountPath: /var/log/test name: plugins readOnly: false- mountPath: / name: plugins readOnly: false- name: log-storage emptyDir: {}- mountPath: /var/log/test name: plugins readOnly: false- mountPath: /var/log/test name: log-storage readOnly: falsechmod 644 /var/log/openbao.log chown openbao:openbao /var/log/openbao.log bao audit enable file file_path=/var/log/openbao.log removedpath_targets = [{"__path__" = "/openbao/logs/*"}] sync_period = "5s" } loki.source.file "openbao_logs" { targets = local.file_match.openbao_file_logs.output forward_to = [loki.write.local_loki.receiver] }configMap: name: sidecar-container-alloy-configitems: - key: "config.yaml" path: "config.alloy"mountPath: /etc/alloy items: - key: "config.yaml" path: "config.alloy"path: "/config.alloy" - key: "config.yaml" path: "/pupa/config.alloy"enabled: true execCommand: - /bin/sh - -c - bao statusecho $(grep "Initial Root Token:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/initial_token.txt echo $(grep "Unseal Key 1:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key1.txt echo $(grep "Unseal Key 2:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key2.txt echo $(grep "Unseal Key 3:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key3.txt echo $(grep "Unseal Key 4:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key4.txt echo $(grep "Unseal Key 5:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key5.txt bao login $(grep "Initial Root Token:" /tmp/init.txt | awk '{print $NF}') rm /tmp/init.txtbao audit enable -path="stdout" file file_path=stdout bao audit enable -path="file" file file_path=/openbao/logs/openbao.log⚠️ Please squash the commits ⚠️
hostPath: path: /var/log type: Directorykind: ConfigMap metadata: name: openbao-logrotate-config namespace: openbao data: openbao: | /var/log/openbao/*.log { size 5k rotate 7 compress missingok notifempty postrotate kill -SIGHUP $(pidof bao) endscript }listener { address = "0.0.0.0:1514" } forward_to = [loki.write.local_loki.receiver] }- name: "tcp_socket" port: 1514 targetPort: 1514 protocol: "TCP" appProtocol: "tcp"- name: "tcp_socket" port: 1514 targetPort: 1514 protocol: "TCP" appProtocol: "tcp"- name: "tcp_socket" port: 1514 targetPort: 1514 protocol: "TCP" appProtocol: "tcp"name: alloy-config key: config.alloytargets = discovery.relabel.pod_logs.output forward_to = [loki.write.local_loki.receiver] }listener { address = "0.0.0.0:1514" labels = { component = "loki.source.syslog", protocol = "tcp" } } forward_to = [loki.write.local_loki.receiver] }