Skip to content

Commit 285945b

Browse files
authored
Add securityContext for Pod to fix PV mount permissions (#356)
Also fix the values file with fields for both vector and fluent-bit dependencies.
1 parent 6bd54be commit 285945b

File tree

5 files changed

+161
-40
lines changed

5 files changed

+161
-40
lines changed

helm-releases/collector-0.0.1.tgz

-1 Bytes
Binary file not shown.

helm-releases/parseable-0.3.1.tgz

419 Bytes
Binary file not shown.

helm/Chart.yaml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,11 @@ name: parseable
33
description: Helm chart for Parseable Server
44
type: application
55
version: 0.3.1
6-
AppVersion: "v0.3.1"
6+
appVersion: "v0.3.1"
7+
maintainers:
8+
- name: Parseable
9+
10+
url: https://parseable.io
711

812
dependencies:
913
- name: vector

helm/values.yaml

Lines changed: 135 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ parseable:
44
tag: v0.3.1
55
pullPolicy: Always
66
local: false
7+
# env:
8+
# RUST_LOG: info
79
persistence:
810
staging:
911
enabled: false
@@ -56,24 +58,68 @@ parseable:
5658
port: 80
5759
resources:
5860
limits:
59-
cpu: 1000m
60-
memory: 8Gi
61-
requests:
6261
cpu: 500m
62+
memory: 4Gi
63+
requests:
64+
cpu: 250m
6365
memory: 1Gi
64-
securityContext:
65-
allowPrivilegeEscalation: false
66+
securityContext: {}
6667
podAnnotations: {}
67-
podSecurityContext: {}
68+
podSecurityContext:
69+
runAsUser: 1000
70+
runAsGroup: 1000
71+
fsGroup: 1000
72+
fsGroupChangePolicy: "Always"
73+
allowPrivilegeEscalation: false
6874
nodeSelector: {}
6975
affinity: {}
7076
tolerations: []
7177

78+
# Default values for Vector
79+
# See Vector helm documentation to learn more:
80+
# https://vector.dev/docs/setup/installation/package-managers/helm/
7281
vector:
7382
enabled: false
74-
# customConfig -- Override Vector's default configs, if used **all** options need to be specified. This section supports
75-
# using helm templates to populate dynamic values. See Vector's [configuration documentation](https://vector.dev/docs/reference/configuration/)
76-
# for all options.
83+
role: "Agent"
84+
rollWorkload: true
85+
image:
86+
repository: timberio/vector
87+
pullPolicy: IfNotPresent
88+
pullSecrets: []
89+
tag: ""
90+
sha: ""
91+
replicas: 1
92+
podManagementPolicy: OrderedReady
93+
podDisruptionBudget:
94+
enabled: false
95+
minAvailable: 1
96+
maxUnavailable:
97+
rbac:
98+
create: true
99+
serviceAccount:
100+
create: true
101+
annotations: {}
102+
name:
103+
automountToken: true
104+
podLabels:
105+
vector.dev/exclude: "true"
106+
args:
107+
- --config-dir
108+
- "/etc/vector/"
109+
terminationGracePeriodSeconds: 60
110+
service:
111+
enabled: true
112+
type: "ClusterIP"
113+
annotations: {}
114+
topologyKeys: []
115+
ports: []
116+
externalTrafficPolicy: ""
117+
loadBalancerIP: ""
118+
ipFamilyPolicy: ""
119+
ipFamilies: []
120+
serviceHeadless:
121+
enabled: true
122+
dnsPolicy: ClusterFirst
77123
customConfig:
78124
data_dir: /vector-data-dir
79125
api:
@@ -86,6 +132,7 @@ vector:
86132
sinks:
87133
parseable:
88134
type: http
135+
method: post
89136
batch:
90137
max_bytes: 10485760
91138
max_events: 1000
@@ -108,9 +155,47 @@ vector:
108155
path: 'http://parseable.parseable.svc.cluster.local/api/v1/liveness'
109156
port: 80
110157

111-
158+
# Default values for fluent-bit.
159+
# See fluent-bit helm documentation to learn more:
160+
# https://github.com/fluent/helm-charts/tree/main/charts/fluent-bit
112161
fluent-bit:
113162
enabled: false
163+
kind: DaemonSet
164+
replicaCount: 1
165+
image:
166+
repository: cr.fluentbit.io/fluent/fluent-bit
167+
tag: ""
168+
pullPolicy: Always
169+
testFramework:
170+
enabled: true
171+
image:
172+
repository: busybox
173+
pullPolicy: Always
174+
tag: latest
175+
serviceAccount:
176+
create: true
177+
annotations: {}
178+
name:
179+
rbac:
180+
create: true
181+
nodeAccess: false
182+
dnsPolicy: ClusterFirst
183+
service:
184+
type: ClusterIP
185+
port: 2020
186+
loadBalancerClass:
187+
loadBalancerSourceRanges: []
188+
labels: {}
189+
livenessProbe:
190+
httpGet:
191+
path: /
192+
port: http
193+
readinessProbe:
194+
httpGet:
195+
path: /api/v1/health
196+
port: http
197+
flush: 1
198+
metricsPort: 2020
114199
## https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/configuration-file
115200
config:
116201
service: |
@@ -128,7 +213,9 @@ fluent-bit:
128213
## https://docs.fluentbit.io/manual/pipeline/inputs
129214
inputs: |
130215
[INPUT]
131-
Name mem
216+
Name tail
217+
Path /var/log/containers/*.log
218+
multiline.parser docker, cri
132219
Tag kube.*
133220
Mem_Buf_Limit 5MB
134221
Skip_Long_Lines On
@@ -160,16 +247,42 @@ fluent-bit:
160247
uri /api/v1/ingest
161248
json_date_key timestamp
162249
json_date_format iso8601
163-
164-
## https://docs.fluentbit.io/manual/administration/configuring-fluent-bit/classic-mode/upstream-servers
165-
## This configuration is deprecated, please use `extraFiles` instead.
250+
166251
upstream: {}
167-
168-
## https://docs.fluentbit.io/manual/pipeline/parsers
252+
169253
customParsers: |
170-
# [PARSER]
171-
# Name docker_no_time
172-
# Format json
173-
# Time_Keep Off
174-
# Time_Key time
175-
# Time_Format %Y-%m-%dT%H:%M:%S.%L
254+
[PARSER]
255+
Name docker_no_time
256+
Format json
257+
Time_Keep Off
258+
Time_Key time
259+
Time_Format %Y-%m-%dT%H:%M:%S.%L
260+
# The config volume is mounted by default, either to the existingConfigMap value, or the default of "fluent-bit.fullname"
261+
volumeMounts:
262+
- name: config
263+
mountPath: /fluent-bit/etc/fluent-bit.conf
264+
subPath: fluent-bit.conf
265+
- name: config
266+
mountPath: /fluent-bit/etc/custom_parsers.conf
267+
subPath: custom_parsers.conf
268+
daemonSetVolumes:
269+
- name: varlog
270+
hostPath:
271+
path: /var/log
272+
- name: varlibdockercontainers
273+
hostPath:
274+
path: /var/lib/docker/containers
275+
- name: etcmachineid
276+
hostPath:
277+
path: /etc/machine-id
278+
type: File
279+
daemonSetVolumeMounts:
280+
- name: varlog
281+
mountPath: /var/log
282+
- name: varlibdockercontainers
283+
mountPath: /var/lib/docker/containers
284+
readOnly: true
285+
- name: etcmachineid
286+
mountPath: /etc/machine-id
287+
readOnly: true
288+
logLevel: info

index.yaml

Lines changed: 21 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,9 @@ entries:
33
collector:
44
- apiVersion: v2
55
appVersion: 4769fbf
6-
created: "2023-04-02T12:53:12.172311+05:30"
6+
created: "2023-04-03T17:20:11.058399+05:30"
77
description: Helm chart for Parseable Collector
8-
digest: c893997205811de1e22b3a197cb2ac3417993a8bfb14d1a718911b18c94c3750
8+
digest: de73053b16a357da71daef931e987a3bc3ed10b83ea2a959d301964c5a277ff2
99
name: collector
1010
type: application
1111
urls:
@@ -14,7 +14,7 @@ entries:
1414
parseable:
1515
- apiVersion: v2
1616
appVersion: v0.3.1
17-
created: "2023-04-02T12:53:12.188789+05:30"
17+
created: "2023-04-03T17:20:11.073553+05:30"
1818
dependencies:
1919
- condition: vector.enabled
2020
name: vector
@@ -25,15 +25,19 @@ entries:
2525
repository: https://fluent.github.io/helm-charts
2626
version: 0.25.0
2727
description: Helm chart for Parseable Server
28-
digest: a7f954ab17411a4744fcdf8fe398d2cfb632cad0919d9a65ff1038c50ece61d8
28+
digest: b5c0c2566dc09586d158263c425078ece91129f4e3894947306eafeca0c0a660
29+
maintainers:
30+
31+
name: Parseable
32+
url: https://parseable.io
2933
name: parseable
3034
type: application
3135
urls:
3236
- https://charts.parseable.io/helm-releases/parseable-0.3.1.tgz
3337
version: 0.3.1
3438
- apiVersion: v2
3539
appVersion: v0.3.0
36-
created: "2023-04-02T12:53:12.184025+05:30"
40+
created: "2023-04-03T17:20:11.068814+05:30"
3741
description: Helm chart for Parseable Server
3842
digest: ff30739229b727dc637f62fd4481c886a6080ce4556bae10cafe7642ddcfd937
3943
name: parseable
@@ -43,7 +47,7 @@ entries:
4347
version: 0.3.0
4448
- apiVersion: v2
4549
appVersion: v0.2.2
46-
created: "2023-04-02T12:53:12.183165+05:30"
50+
created: "2023-04-03T17:20:11.067547+05:30"
4751
description: Helm chart for Parseable Server
4852
digest: 477d0dc2f0c07d4f4c32e105d4bdd70c71113add5c2a75ac5f1cb42aa0276db7
4953
name: parseable
@@ -53,7 +57,7 @@ entries:
5357
version: 0.2.2
5458
- apiVersion: v2
5559
appVersion: v0.2.1
56-
created: "2023-04-02T12:53:12.182318+05:30"
60+
created: "2023-04-03T17:20:11.066424+05:30"
5761
description: Helm chart for Parseable Server
5862
digest: 84826fcd1b4c579f301569f43b0309c07e8082bad76f5cdd25f86e86ca2e8192
5963
name: parseable
@@ -63,7 +67,7 @@ entries:
6367
version: 0.2.1
6468
- apiVersion: v2
6569
appVersion: v0.2.0
66-
created: "2023-04-02T12:53:12.181659+05:30"
70+
created: "2023-04-03T17:20:11.065793+05:30"
6771
description: Helm chart for Parseable Server
6872
digest: 7a759f7f9809f3935cba685e904c021a0b645f217f4e45b9be185900c467edff
6973
name: parseable
@@ -73,7 +77,7 @@ entries:
7377
version: 0.2.0
7478
- apiVersion: v2
7579
appVersion: v0.1.1
76-
created: "2023-04-02T12:53:12.180806+05:30"
80+
created: "2023-04-03T17:20:11.065022+05:30"
7781
description: Helm chart for Parseable Server
7882
digest: 37993cf392f662ec7b1fbfc9a2ba00ec906d98723e38f3c91ff1daca97c3d0b3
7983
name: parseable
@@ -83,7 +87,7 @@ entries:
8387
version: 0.1.1
8488
- apiVersion: v2
8589
appVersion: v0.1.0
86-
created: "2023-04-02T12:53:12.179996+05:30"
90+
created: "2023-04-03T17:20:11.064333+05:30"
8791
description: Helm chart for Parseable Server
8892
digest: 1d580d072af8d6b1ebcbfee31c2e16c907d08db754780f913b5f0032b403789b
8993
name: parseable
@@ -93,7 +97,7 @@ entries:
9397
version: 0.1.0
9498
- apiVersion: v2
9599
appVersion: v0.0.8
96-
created: "2023-04-02T12:53:12.179273+05:30"
100+
created: "2023-04-03T17:20:11.063638+05:30"
97101
description: Helm chart for Parseable Server
98102
digest: c805254ffa634f96ecec448bcfff9973339aa9487dd8199b21b17b79a4de9345
99103
name: parseable
@@ -103,7 +107,7 @@ entries:
103107
version: 0.0.8
104108
- apiVersion: v2
105109
appVersion: v0.0.7
106-
created: "2023-04-02T12:53:12.178194+05:30"
110+
created: "2023-04-03T17:20:11.062831+05:30"
107111
description: Helm chart for Parseable Server
108112
digest: c591f617ed1fe820bb2c72a4c976a78126f1d1095d552daa07c4700f46c4708a
109113
name: parseable
@@ -113,7 +117,7 @@ entries:
113117
version: 0.0.7
114118
- apiVersion: v2
115119
appVersion: v0.0.6
116-
created: "2023-04-02T12:53:12.176814+05:30"
120+
created: "2023-04-03T17:20:11.061596+05:30"
117121
description: Helm chart for Parseable Server
118122
digest: f9ae56a6fcd6a59e7bee0436200ddbedeb74ade6073deb435b8fcbaf08dda795
119123
name: parseable
@@ -123,7 +127,7 @@ entries:
123127
version: 0.0.6
124128
- apiVersion: v2
125129
appVersion: v0.0.5
126-
created: "2023-04-02T12:53:12.175896+05:30"
130+
created: "2023-04-03T17:20:11.060872+05:30"
127131
description: Helm chart for Parseable Server
128132
digest: 4d6b08a064fba36e16feeb820b77e1e8e60fb6de48dbf7ec8410d03d10c26ad0
129133
name: parseable
@@ -133,7 +137,7 @@ entries:
133137
version: 0.0.5
134138
- apiVersion: v2
135139
appVersion: v0.0.2
136-
created: "2023-04-02T12:53:12.174024+05:30"
140+
created: "2023-04-03T17:20:11.06016+05:30"
137141
description: Helm chart for Parseable Server
138142
digest: 38a0a3e4c498afbbcc76ebfcb9cb598fa2ca843a53cc93b3cb4f135b85c10844
139143
name: parseable
@@ -143,12 +147,12 @@ entries:
143147
version: 0.0.2
144148
- apiVersion: v2
145149
appVersion: v0.0.1
146-
created: "2023-04-02T12:53:12.173227+05:30"
150+
created: "2023-04-03T17:20:11.059181+05:30"
147151
description: Helm chart for Parseable Server
148152
digest: 1f1142db092b9620ee38bb2294ccbb1c17f807b33bf56da43816af7fe89f301e
149153
name: parseable
150154
type: application
151155
urls:
152156
- https://charts.parseable.io/helm-releases/parseable-0.0.1.tgz
153157
version: 0.0.1
154-
generated: "2023-04-02T12:53:12.171708+05:30"
158+
generated: "2023-04-03T17:20:11.055518+05:30"

0 commit comments

Comments
 (0)