From b9b33038285a1774b3fbad3785c56c561994707d Mon Sep 17 00:00:00 2001 From: makefunstuff Date: Sat, 29 Jun 2024 23:27:47 +0300 Subject: filebeat --- tools/eck-operator/templates/beat.yaml | 97 ++++++++++------------------------ 1 file changed, 29 insertions(+), 68 deletions(-) (limited to 'tools/eck-operator') diff --git a/tools/eck-operator/templates/beat.yaml b/tools/eck-operator/templates/beat.yaml index 48c4b09..0b9edd4 100644 --- a/tools/eck-operator/templates/beat.yaml +++ b/tools/eck-operator/templates/beat.yaml @@ -3,77 +3,38 @@ kind: Beat metadata: name: log-storage spec: + type: filebeat + version: 8.14.1 + elasticsearchRef: + name: log-storage config: - filebeat: - autodiscover: - providers: - - node: ${NODE_NAME} - type: kubernetes - hints: - enabled: true - default_config: - type: container - paths: - - /var/log/containers/*${data.kubernetes.container.id}.log + filebeat.inputs: + - type: container + paths: + - /var/log/containers/*.log daemonSet: podTemplate: spec: - serviceAccount: elastic-beat-filebeat-log-storage - automountServiceAccountToken: true + dnsPolicy: ClusterFirstWithHostNet + hostNetwork: true + securityContext: + runAsUser: 0 containers: - name: filebeat - env: - - name: NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName -... ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: elastic-beat-filebeat-log-storage ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: elastic-beat-autodiscover-binding -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: elastic-beat-autodiscover -subjects: -- kind: ServiceAccount - name: elastic-beat-filebeat-log-storage - namespace: default ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: elastic-beat-autodiscover -rules: -- apiGroups: - - "" - resources: - - nodes - - namespaces - - events - - pods - verbs: - - get - - list - - watch -- apiGroups: ["apps"] - resources: - - replicasets - verbs: - - get - - list - - watch -- apiGroups: ["batch"] - resources: - - jobs - verbs: - - get - - list - - watch + volumeMounts: + - name: varlogcontainers + mountPath: /var/log/containers + - name: varlogpods + mountPath: /var/log/pods + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + volumes: + - name: varlogcontainers + hostPath: + path: /var/log/containers + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers -- cgit 1.4.1-2-gfad0