Merge "Update Elastic Beats versions to 7.1.0"
This commit is contained in:
commit
042ac52397
@ -23,5 +23,7 @@ metadata:
|
|||||||
name: filebeat-etc
|
name: filebeat-etc
|
||||||
data:
|
data:
|
||||||
filebeat.yml: |
|
filebeat.yml: |
|
||||||
{{ toYaml .Values.conf | indent 4 }}
|
{{ toYaml .Values.conf.filebeat | indent 4 }}
|
||||||
|
system.yml: |
|
||||||
|
{{ toYaml .Values.conf.modules.system | indent 4 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
@ -48,6 +48,7 @@ rules:
|
|||||||
- nodes
|
- nodes
|
||||||
- pods
|
- pods
|
||||||
- services
|
- services
|
||||||
|
- endpoints
|
||||||
- replicationcontrollers
|
- replicationcontrollers
|
||||||
- limitranges
|
- limitranges
|
||||||
verbs:
|
verbs:
|
||||||
@ -105,10 +106,18 @@ spec:
|
|||||||
- name: filebeat
|
- name: filebeat
|
||||||
containerPort: {{ tuple "filebeat" "internal" "service" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
containerPort: {{ tuple "filebeat" "internal" "service" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
|
||||||
env:
|
env:
|
||||||
|
- name: NODE_NAME
|
||||||
|
valueFrom:
|
||||||
|
fieldRef:
|
||||||
|
fieldPath: spec.nodeName
|
||||||
- name: ELASTICSEARCH_HOST
|
- name: ELASTICSEARCH_HOST
|
||||||
value: {{ tuple "elasticsearch" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
value: {{ tuple "elasticsearch" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
- name: ELASTICSEARCH_PORT
|
- name: ELASTICSEARCH_PORT
|
||||||
value: {{ tuple "elasticsearch" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
value: {{ tuple "elasticsearch" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
|
- name: KIBANA_HOST
|
||||||
|
value: {{ tuple "kibana" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
|
- name: KIBANA_PORT
|
||||||
|
value: {{ tuple "kibana" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
- name: ELASTICSEARCH_USERNAME
|
- name: ELASTICSEARCH_USERNAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
@ -133,6 +142,10 @@ spec:
|
|||||||
mountPath: /usr/share/filebeat/filebeat.yml
|
mountPath: /usr/share/filebeat/filebeat.yml
|
||||||
readOnly: true
|
readOnly: true
|
||||||
subPath: filebeat.yml
|
subPath: filebeat.yml
|
||||||
|
- name: filebeat-etc
|
||||||
|
mountPath: /usr/share/filebeat/modules.d/system.yml
|
||||||
|
subPath: system.yml
|
||||||
|
readOnly: true
|
||||||
{{ if $mounts_filebeat.volumeMounts }}{{ toYaml $mounts_filebeat.volumeMounts | indent 8 }}{{ end }}
|
{{ if $mounts_filebeat.volumeMounts }}{{ toYaml $mounts_filebeat.volumeMounts | indent 8 }}{{ end }}
|
||||||
volumes:
|
volumes:
|
||||||
- name: pod-tmp
|
- name: pod-tmp
|
||||||
|
@ -28,7 +28,7 @@ labels:
|
|||||||
|
|
||||||
images:
|
images:
|
||||||
tags:
|
tags:
|
||||||
filebeat: docker.elastic.co/beats/filebeat:6.2.3
|
filebeat: docker.elastic.co/beats/filebeat-oss:7.1.0
|
||||||
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
||||||
image_repo_sync: docker.io/docker:17.07.0
|
image_repo_sync: docker.io/docker:17.07.0
|
||||||
pull_policy: IfNotPresent
|
pull_policy: IfNotPresent
|
||||||
@ -53,33 +53,40 @@ dependencies:
|
|||||||
service: local_image_registry
|
service: local_image_registry
|
||||||
static:
|
static:
|
||||||
filebeat:
|
filebeat:
|
||||||
services: null
|
services:
|
||||||
|
- endpoint: internal
|
||||||
|
service: kibana
|
||||||
image_repo_sync:
|
image_repo_sync:
|
||||||
services:
|
services:
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
service: local_image_registry
|
service: local_image_registry
|
||||||
|
|
||||||
conf:
|
conf:
|
||||||
|
filebeat:
|
||||||
setup:
|
setup:
|
||||||
dashboards:
|
dashboards:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
index: "filebeat-*"
|
||||||
|
retry:
|
||||||
|
enabled: true
|
||||||
|
interval: 5
|
||||||
|
kibana:
|
||||||
|
host: "${KIBANA_HOST}:${KIBANA_PORT}"
|
||||||
|
username: "${ELASTICSEARCH_USERNAME}"
|
||||||
|
password: "${ELASTICSEARCH_PASSWORD}"
|
||||||
path:
|
path:
|
||||||
logs: /var/log/
|
logs: /var/log/
|
||||||
output:
|
output:
|
||||||
elasticsearch:
|
elasticsearch:
|
||||||
hosts: ["${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}"]
|
hosts: ["${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}/"]
|
||||||
username: "${ELASTICSEARCH_USERNAME}"
|
username: "${ELASTICSEARCH_USERNAME}"
|
||||||
password: "${ELASTICSEARCH_PASSWORD}"
|
password: "${ELASTICSEARCH_PASSWORD}"
|
||||||
filebeat:
|
filebeat:
|
||||||
config:
|
config:
|
||||||
prospectors:
|
|
||||||
path: ${path.config}/prospectors.d/*.yml
|
|
||||||
reload:
|
|
||||||
enabled: false
|
|
||||||
modules:
|
modules:
|
||||||
path: ${path.config}/modules.d/*.yml
|
path: ${path.config}/modules.d/*.yml
|
||||||
reload:
|
reload:
|
||||||
enabled: false
|
enabled: true
|
||||||
autodiscover:
|
autodiscover:
|
||||||
providers:
|
providers:
|
||||||
- type: kubernetes
|
- type: kubernetes
|
||||||
@ -112,14 +119,16 @@ conf:
|
|||||||
containers.ids:
|
containers.ids:
|
||||||
- "${data.kubernetes.container.id}"
|
- "${data.kubernetes.container.id}"
|
||||||
exclude_lines: ["^\\s+[\\-`('.|_]"]
|
exclude_lines: ["^\\s+[\\-`('.|_]"]
|
||||||
prospectors:
|
- type: kubernetes
|
||||||
|
templates:
|
||||||
|
- condition:
|
||||||
|
equals:
|
||||||
|
kubernetes.namespace: osh-infra
|
||||||
|
config:
|
||||||
- type: docker
|
- type: docker
|
||||||
containers.ids:
|
containers.ids:
|
||||||
- "*"
|
- "${data.kubernetes.container.id}"
|
||||||
multiline:
|
exclude_lines: ["^\\s+[\\-`('.|_]"]
|
||||||
pattern: '^Traceback'
|
|
||||||
match: after
|
|
||||||
negate: true
|
|
||||||
processors:
|
processors:
|
||||||
- add_kubernetes_metadata:
|
- add_kubernetes_metadata:
|
||||||
in_cluster: true
|
in_cluster: true
|
||||||
@ -129,6 +138,21 @@ conf:
|
|||||||
kubernetes:
|
kubernetes:
|
||||||
container:
|
container:
|
||||||
name: "filebeat"
|
name: "filebeat"
|
||||||
|
modules:
|
||||||
|
system:
|
||||||
|
- module: system
|
||||||
|
syslog:
|
||||||
|
enabled: true
|
||||||
|
var.paths: ["/var/log/syslog*"]
|
||||||
|
fields:
|
||||||
|
host:
|
||||||
|
name: "${NODE_NAME}"
|
||||||
|
auth:
|
||||||
|
enabled: true
|
||||||
|
var.paths: ["/var/log/auth.log"]
|
||||||
|
fields:
|
||||||
|
host:
|
||||||
|
name: "${NODE_NAME}"
|
||||||
|
|
||||||
endpoints:
|
endpoints:
|
||||||
cluster_domain_suffix: cluster.local
|
cluster_domain_suffix: cluster.local
|
||||||
@ -165,6 +189,23 @@ endpoints:
|
|||||||
port:
|
port:
|
||||||
http:
|
http:
|
||||||
default: 80
|
default: 80
|
||||||
|
kibana:
|
||||||
|
name: kibana
|
||||||
|
namespace: null
|
||||||
|
hosts:
|
||||||
|
default: kibana-dash
|
||||||
|
public: kibana
|
||||||
|
host_fqdn_override:
|
||||||
|
default: null
|
||||||
|
path:
|
||||||
|
default: null
|
||||||
|
scheme:
|
||||||
|
default: http
|
||||||
|
port:
|
||||||
|
kibana:
|
||||||
|
default: 5601
|
||||||
|
http:
|
||||||
|
default: 80
|
||||||
filebeat:
|
filebeat:
|
||||||
namespace: null
|
namespace: null
|
||||||
name: filebeat
|
name: filebeat
|
||||||
|
@ -48,8 +48,10 @@ rules:
|
|||||||
- nodes
|
- nodes
|
||||||
- pods
|
- pods
|
||||||
- services
|
- services
|
||||||
|
- endpoints
|
||||||
- replicationcontrollers
|
- replicationcontrollers
|
||||||
- limitranges
|
- limitranges
|
||||||
|
- events
|
||||||
verbs:
|
verbs:
|
||||||
- get
|
- get
|
||||||
- list
|
- list
|
||||||
@ -104,7 +106,7 @@ spec:
|
|||||||
{{ tuple $envAll $envAll.Values.pod.resources.metricbeat | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
{{ tuple $envAll $envAll.Values.pod.resources.metricbeat | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
||||||
args:
|
args:
|
||||||
- "-c"
|
- "-c"
|
||||||
- "/etc/metricbeat.yml"
|
- "/usr/share/metricbeat/metricbeat.yml"
|
||||||
- "-e"
|
- "-e"
|
||||||
- "-system.hostfs=/hostfs"
|
- "-system.hostfs=/hostfs"
|
||||||
env:
|
env:
|
||||||
@ -112,6 +114,10 @@ spec:
|
|||||||
value: {{ tuple "elasticsearch" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
value: {{ tuple "elasticsearch" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
- name: ELASTICSEARCH_PORT
|
- name: ELASTICSEARCH_PORT
|
||||||
value: {{ tuple "elasticsearch" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
value: {{ tuple "elasticsearch" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
|
- name: KIBANA_HOST
|
||||||
|
value: {{ tuple "kibana" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
|
- name: KIBANA_PORT
|
||||||
|
value: {{ tuple "kibana" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
- name: ELASTICSEARCH_USERNAME
|
- name: ELASTICSEARCH_USERNAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
@ -130,7 +136,7 @@ spec:
|
|||||||
- name: pod-tmp
|
- name: pod-tmp
|
||||||
mountPath: /tmp
|
mountPath: /tmp
|
||||||
- name: metricbeat-etc
|
- name: metricbeat-etc
|
||||||
mountPath: /etc/metricbeat.yml
|
mountPath: /usr/share/metricbeat/metricbeat.yml
|
||||||
subPath: metricbeat.yml
|
subPath: metricbeat.yml
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: metricbeat-etc
|
- name: metricbeat-etc
|
||||||
|
@ -19,9 +19,54 @@ limitations under the License.
|
|||||||
|
|
||||||
{{- $esUserSecret := .Values.secrets.elasticsearch.user }}
|
{{- $esUserSecret := .Values.secrets.elasticsearch.user }}
|
||||||
|
|
||||||
{{- $serviceAccountName := "metricbeat" }}
|
{{- $serviceAccountName := printf "%s-%s" .Release.Name "metricbeat-deployments" }}
|
||||||
{{ tuple $envAll "metricbeat" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
{{ tuple $envAll "metricbeat" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
||||||
---
|
---
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceAccountName }}
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: {{ $serviceAccountName }}
|
||||||
|
namespace: {{ .Release.Namespace }}
|
||||||
|
roleRef:
|
||||||
|
kind: ClusterRole
|
||||||
|
name: {{ $serviceAccountName }}
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
---
|
||||||
|
kind: ClusterRole
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: {{ $serviceAccountName }}
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- namespaces
|
||||||
|
- nodes
|
||||||
|
- pods
|
||||||
|
- services
|
||||||
|
- endpoints
|
||||||
|
- replicationcontrollers
|
||||||
|
- limitranges
|
||||||
|
- events
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
- apiGroups:
|
||||||
|
- apps
|
||||||
|
resources:
|
||||||
|
- statefulsets
|
||||||
|
- daemonsets
|
||||||
|
- deployments
|
||||||
|
- replicasets
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- watch
|
||||||
|
---
|
||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
@ -57,7 +102,7 @@ spec:
|
|||||||
{{ tuple $envAll $envAll.Values.pod.resources.metricbeat | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
{{ tuple $envAll $envAll.Values.pod.resources.metricbeat | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
||||||
args:
|
args:
|
||||||
- "-c"
|
- "-c"
|
||||||
- "/etc/metricbeat.yml"
|
- "/usr/share/metricbeat/metricbeat.yml"
|
||||||
- "-e"
|
- "-e"
|
||||||
env:
|
env:
|
||||||
- name: ELASTICSEARCH_HOST
|
- name: ELASTICSEARCH_HOST
|
||||||
@ -68,6 +113,10 @@ spec:
|
|||||||
value: {{ tuple "kube_state_metrics" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
value: {{ tuple "kube_state_metrics" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
- name: KUBE_STATE_METRICS_PORT
|
- name: KUBE_STATE_METRICS_PORT
|
||||||
value: {{ tuple "kube_state_metrics" "internal" "metrics" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
value: {{ tuple "kube_state_metrics" "internal" "metrics" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
|
- name: KIBANA_HOST
|
||||||
|
value: {{ tuple "kibana" "internal" . | include "helm-toolkit.endpoints.hostname_namespaced_endpoint_lookup" | quote }}
|
||||||
|
- name: KIBANA_PORT
|
||||||
|
value: {{ tuple "kibana" "internal" "http" . | include "helm-toolkit.endpoints.endpoint_port_lookup" | quote }}
|
||||||
- name: ELASTICSEARCH_USERNAME
|
- name: ELASTICSEARCH_USERNAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
@ -86,7 +135,7 @@ spec:
|
|||||||
- name: pod-tmp
|
- name: pod-tmp
|
||||||
mountPath: /tmp
|
mountPath: /tmp
|
||||||
- name: metricbeat-etc
|
- name: metricbeat-etc
|
||||||
mountPath: /etc/metricbeat.yml
|
mountPath: /usr/share/metricbeat/metricbeat.yml
|
||||||
subPath: metricbeat.yml
|
subPath: metricbeat.yml
|
||||||
readOnly: true
|
readOnly: true
|
||||||
- name: metricbeat-etc
|
- name: metricbeat-etc
|
||||||
|
@ -28,7 +28,7 @@ labels:
|
|||||||
|
|
||||||
images:
|
images:
|
||||||
tags:
|
tags:
|
||||||
metricbeat: docker.elastic.co/beats/metricbeat:6.3.1
|
metricbeat: docker.elastic.co/beats/metricbeat-oss:7.1.0
|
||||||
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
||||||
image_repo_sync: docker.io/docker:17.07.0
|
image_repo_sync: docker.io/docker:17.07.0
|
||||||
pull_policy: IfNotPresent
|
pull_policy: IfNotPresent
|
||||||
@ -53,7 +53,9 @@ dependencies:
|
|||||||
service: local_image_registry
|
service: local_image_registry
|
||||||
static:
|
static:
|
||||||
metricbeat:
|
metricbeat:
|
||||||
services: null
|
services:
|
||||||
|
- endpoint: internal
|
||||||
|
service: kibana
|
||||||
image_repo_sync:
|
image_repo_sync:
|
||||||
services:
|
services:
|
||||||
- endpoint: internal
|
- endpoint: internal
|
||||||
@ -64,9 +66,14 @@ conf:
|
|||||||
setup:
|
setup:
|
||||||
dashboards:
|
dashboards:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
index: metricbeat-*
|
||||||
retry:
|
retry:
|
||||||
enabled: true
|
enabled: true
|
||||||
interval: 5
|
interval: 5
|
||||||
|
kibana:
|
||||||
|
host: "${KIBANA_HOST}:${KIBANA_PORT}"
|
||||||
|
username: "${ELASTICSEARCH_USERNAME}"
|
||||||
|
password: "${ELASTICSEARCH_PASSWORD}"
|
||||||
metricbeat:
|
metricbeat:
|
||||||
config:
|
config:
|
||||||
modules:
|
modules:
|
||||||
@ -79,35 +86,20 @@ conf:
|
|||||||
username: ${ELASTICSEARCH_USERNAME}
|
username: ${ELASTICSEARCH_USERNAME}
|
||||||
password: ${ELASTICSEARCH_PASSWORD}
|
password: ${ELASTICSEARCH_PASSWORD}
|
||||||
modules:
|
modules:
|
||||||
mysql:
|
docker:
|
||||||
- module: mysql
|
- module: docker
|
||||||
metricsets: ["status"]
|
metricsets:
|
||||||
hosts: ["tcp(mariadb.openstack.svc.cluster.local:3306)/"]
|
- "container"
|
||||||
username: root
|
- "cpu"
|
||||||
password: password
|
- "diskio"
|
||||||
rabbitmq:
|
- "healthcheck"
|
||||||
- module: rabbitmq
|
- "info"
|
||||||
metricsets: ["node", "queue", "connection"]
|
- "image"
|
||||||
|
- "memory"
|
||||||
|
- "network"
|
||||||
|
hosts: ["unix:///var/run/docker.sock"]
|
||||||
|
period: 10s
|
||||||
enabled: true
|
enabled: true
|
||||||
period: 30s
|
|
||||||
hosts: ["rabbitmq.openstack.svc.cluster.local:15672"]
|
|
||||||
username: rabbitmq
|
|
||||||
password: password
|
|
||||||
# docker:
|
|
||||||
# - module: docker
|
|
||||||
# metricsets:
|
|
||||||
# - "container"
|
|
||||||
# - "cpu"
|
|
||||||
# - "diskio"
|
|
||||||
# - "healthcheck"
|
|
||||||
# - "info"
|
|
||||||
# - "image"
|
|
||||||
# - "memory"
|
|
||||||
# - "network"
|
|
||||||
# hosts: ["unix:///var/run/docker.sock"]
|
|
||||||
# period: 10s
|
|
||||||
# enabled: false
|
|
||||||
# labels.dedot: true
|
|
||||||
system:
|
system:
|
||||||
- module: system
|
- module: system
|
||||||
period: 10s
|
period: 10s
|
||||||
@ -121,18 +113,15 @@ conf:
|
|||||||
- core
|
- core
|
||||||
- diskio
|
- diskio
|
||||||
- socket
|
- socket
|
||||||
|
- filesystem
|
||||||
|
- fsstat
|
||||||
processes: ['.*']
|
processes: ['.*']
|
||||||
|
cpu.metrics: ["percentages"]
|
||||||
|
core.metrics: ["percentages"]
|
||||||
process.include_top_n:
|
process.include_top_n:
|
||||||
by_cpu: 5
|
by_cpu: 5
|
||||||
by_memory: 5
|
by_memory: 5
|
||||||
- module: system
|
enabled: true
|
||||||
period: 1m
|
|
||||||
metricsets:
|
|
||||||
- filesystem
|
|
||||||
- fsstat
|
|
||||||
processors:
|
|
||||||
- drop_event.when.regexp:
|
|
||||||
system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib)($|/)'
|
|
||||||
daemonset_kubernetes:
|
daemonset_kubernetes:
|
||||||
- module: kubernetes
|
- module: kubernetes
|
||||||
metricsets:
|
metricsets:
|
||||||
@ -143,6 +132,9 @@ conf:
|
|||||||
- volume
|
- volume
|
||||||
period: 10s
|
period: 10s
|
||||||
hosts: ["localhost:10255"]
|
hosts: ["localhost:10255"]
|
||||||
|
add_metadata: true
|
||||||
|
in_cluster: true
|
||||||
|
enabled: true
|
||||||
deployment_kubernetes:
|
deployment_kubernetes:
|
||||||
- module: kubernetes
|
- module: kubernetes
|
||||||
metricsets:
|
metricsets:
|
||||||
@ -154,6 +146,9 @@ conf:
|
|||||||
- event
|
- event
|
||||||
period: 10s
|
period: 10s
|
||||||
hosts: ['${KUBE_STATE_METRICS_HOST}:${KUBE_STATE_METRICS_PORT}']
|
hosts: ['${KUBE_STATE_METRICS_HOST}:${KUBE_STATE_METRICS_PORT}']
|
||||||
|
add_metadata: true
|
||||||
|
in_cluster: true
|
||||||
|
enabled: true
|
||||||
|
|
||||||
endpoints:
|
endpoints:
|
||||||
cluster_domain_suffix: cluster.local
|
cluster_domain_suffix: cluster.local
|
||||||
@ -203,6 +198,23 @@ endpoints:
|
|||||||
port:
|
port:
|
||||||
http:
|
http:
|
||||||
default: 80
|
default: 80
|
||||||
|
kibana:
|
||||||
|
name: kibana
|
||||||
|
namespace: osh-infra
|
||||||
|
hosts:
|
||||||
|
default: kibana-dash
|
||||||
|
public: kibana
|
||||||
|
host_fqdn_override:
|
||||||
|
default: null
|
||||||
|
path:
|
||||||
|
default: null
|
||||||
|
scheme:
|
||||||
|
default: http
|
||||||
|
port:
|
||||||
|
kibana:
|
||||||
|
default: 5601
|
||||||
|
http:
|
||||||
|
default: 80
|
||||||
|
|
||||||
pod:
|
pod:
|
||||||
affinity:
|
affinity:
|
||||||
|
@ -48,6 +48,7 @@ rules:
|
|||||||
- nodes
|
- nodes
|
||||||
- pods
|
- pods
|
||||||
- services
|
- services
|
||||||
|
- endpoints
|
||||||
- replicationcontrollers
|
- replicationcontrollers
|
||||||
- limitranges
|
- limitranges
|
||||||
verbs:
|
verbs:
|
||||||
@ -102,7 +103,7 @@ spec:
|
|||||||
- NET_ADMIN
|
- NET_ADMIN
|
||||||
args:
|
args:
|
||||||
- "-c"
|
- "-c"
|
||||||
- "/etc/packetbeat/packetbeat.yml"
|
- "/usr/share/packetbeat/packetbeat.yml"
|
||||||
- "-e"
|
- "-e"
|
||||||
env:
|
env:
|
||||||
- name: ELASTICSEARCH_HOST
|
- name: ELASTICSEARCH_HOST
|
||||||
@ -131,7 +132,7 @@ spec:
|
|||||||
- name: pod-tmp
|
- name: pod-tmp
|
||||||
mountPath: /tmp
|
mountPath: /tmp
|
||||||
- name: packetbeat-etc
|
- name: packetbeat-etc
|
||||||
mountPath: /etc/packetbeat/packetbeat.yml
|
mountPath: /usr/share/packetbeat/packetbeat.yml
|
||||||
subPath: packetbeat.yml
|
subPath: packetbeat.yml
|
||||||
readOnly: true
|
readOnly: true
|
||||||
{{ if $mounts_packetbeat.volumeMounts }}{{ toYaml $mounts_packetbeat.volumeMounts | indent 12 }}{{ end }}
|
{{ if $mounts_packetbeat.volumeMounts }}{{ toYaml $mounts_packetbeat.volumeMounts | indent 12 }}{{ end }}
|
||||||
|
@ -28,7 +28,7 @@ labels:
|
|||||||
|
|
||||||
images:
|
images:
|
||||||
tags:
|
tags:
|
||||||
packetbeat: docker.elastic.co/beats/packetbeat:6.3.1
|
packetbeat: docker.elastic.co/beats/packetbeat-oss:7.1.0
|
||||||
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
dep_check: quay.io/airshipit/kubernetes-entrypoint:v1.0.0
|
||||||
image_repo_sync: docker.io/docker:17.07.0
|
image_repo_sync: docker.io/docker:17.07.0
|
||||||
pull_policy: IfNotPresent
|
pull_policy: IfNotPresent
|
||||||
@ -63,28 +63,30 @@ conf:
|
|||||||
packetbeat:
|
packetbeat:
|
||||||
setup:
|
setup:
|
||||||
kibana:
|
kibana:
|
||||||
host: ['${KIBANA_HOST}:${KIBANA_PORT}']
|
host: "${KIBANA_HOST}:${KIBANA_PORT}"
|
||||||
|
username: "${ELASTICSEARCH_USERNAME}"
|
||||||
|
password: "${ELASTICSEARCH_PASSWORD}"
|
||||||
dashboards:
|
dashboards:
|
||||||
enabled: true
|
enabled: true
|
||||||
|
index: "packetbeat-*"
|
||||||
retry:
|
retry:
|
||||||
enabled: true
|
enabled: true
|
||||||
interval: 5
|
interval: 5
|
||||||
packetbeat:
|
packetbeat:
|
||||||
|
flows:
|
||||||
|
timeout: 30s
|
||||||
|
period: 10s
|
||||||
interfaces:
|
interfaces:
|
||||||
device: any
|
device: any
|
||||||
protocols:
|
protocols:
|
||||||
|
- type: dhcpv4
|
||||||
|
ports: [67, 68]
|
||||||
- type: dns
|
- type: dns
|
||||||
ports: [53]
|
ports: [53]
|
||||||
include_authorities: true
|
include_authorities: true
|
||||||
include_additionals: true
|
include_additionals: true
|
||||||
- type: http
|
- type: http
|
||||||
ports: [80, 8080, 8081, 5000, 8002]
|
ports: [80, 8080, 8081, 5000, 8002, 6666, 3000, 5601, 9100, 9090, 44134]
|
||||||
- type: memcache
|
|
||||||
ports: [11211]
|
|
||||||
- type: mysql
|
|
||||||
ports: [3306]
|
|
||||||
- type: rabbit
|
|
||||||
ports: [5672, 15672]
|
|
||||||
output:
|
output:
|
||||||
elasticsearch:
|
elasticsearch:
|
||||||
hosts: ['${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}']
|
hosts: ['${ELASTICSEARCH_HOST}:${ELASTICSEARCH_PORT}']
|
||||||
|
1
tools/deployment/elastic-beats/005-deploy-k8s.sh
Symbolic link
1
tools/deployment/elastic-beats/005-deploy-k8s.sh
Symbolic link
@ -0,0 +1 @@
|
|||||||
|
../common/005-deploy-k8s.sh
|
@ -1 +0,0 @@
|
|||||||
../multinode/010-deploy-docker-registry.sh
|
|
@ -21,12 +21,39 @@ make elasticsearch
|
|||||||
|
|
||||||
#NOTE: Deploy command
|
#NOTE: Deploy command
|
||||||
tee /tmp/elasticsearch.yaml << EOF
|
tee /tmp/elasticsearch.yaml << EOF
|
||||||
|
manifests:
|
||||||
|
cron_curator: false
|
||||||
|
configmap_bin_curator: false
|
||||||
|
configmap_etc_curator: false
|
||||||
|
images:
|
||||||
|
tags:
|
||||||
|
elasticsearch: docker.io/openstackhelm/elasticsearch-s3:7_1_0-20191115
|
||||||
|
storage:
|
||||||
|
data:
|
||||||
|
requests:
|
||||||
|
storage: 20Gi
|
||||||
|
master:
|
||||||
|
requests:
|
||||||
|
storage: 5Gi
|
||||||
|
jobs:
|
||||||
|
verify_repositories:
|
||||||
|
cron: "*/10 * * * *"
|
||||||
monitoring:
|
monitoring:
|
||||||
prometheus:
|
prometheus:
|
||||||
enabled: true
|
enabled: false
|
||||||
pod:
|
pod:
|
||||||
replicas:
|
replicas:
|
||||||
|
client: 1
|
||||||
data: 1
|
data: 1
|
||||||
|
master: 2
|
||||||
|
conf:
|
||||||
|
elasticsearch:
|
||||||
|
config:
|
||||||
|
xpack:
|
||||||
|
security:
|
||||||
|
enabled: false
|
||||||
|
ilm:
|
||||||
|
enabled: false
|
||||||
|
|
||||||
EOF
|
EOF
|
||||||
helm upgrade --install elasticsearch ./elasticsearch \
|
helm upgrade --install elasticsearch ./elasticsearch \
|
||||||
|
60
tools/deployment/elastic-beats/060-kibana.sh
Executable file
60
tools/deployment/elastic-beats/060-kibana.sh
Executable file
@ -0,0 +1,60 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||||
|
# not use this file except in compliance with the License. You may obtain
|
||||||
|
# a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||||
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||||
|
# License for the specific language governing permissions and limitations
|
||||||
|
# under the License.
|
||||||
|
|
||||||
|
set -xe
|
||||||
|
|
||||||
|
#NOTE: Lint and package chart
|
||||||
|
make kibana
|
||||||
|
|
||||||
|
: ${OSH_INFRA_EXTRA_HELM_ARGS_KIBANA:="$(./tools/deployment/common/get-values-overrides.sh kibana)"}
|
||||||
|
|
||||||
|
tee /tmp/kibana.yaml << EOF
|
||||||
|
images:
|
||||||
|
tags:
|
||||||
|
kibana: docker.elastic.co/kibana/kibana:7.1.0
|
||||||
|
conf:
|
||||||
|
kibana:
|
||||||
|
xpack:
|
||||||
|
security:
|
||||||
|
enabled: false
|
||||||
|
spaces:
|
||||||
|
enabled: false
|
||||||
|
apm:
|
||||||
|
enabled: false
|
||||||
|
graph:
|
||||||
|
enabled: false
|
||||||
|
ml:
|
||||||
|
enabled: false
|
||||||
|
monitoring:
|
||||||
|
enabled: false
|
||||||
|
reporting:
|
||||||
|
enabled: false
|
||||||
|
canvas:
|
||||||
|
enabled: false
|
||||||
|
EOF
|
||||||
|
|
||||||
|
#NOTE: Deploy command
|
||||||
|
helm upgrade --install kibana ./kibana \
|
||||||
|
--namespace=osh-infra \
|
||||||
|
--values=/tmp/kibana.yaml
|
||||||
|
${OSH_INFRA_EXTRA_HELM_ARGS} \
|
||||||
|
${OSH_INFRA_EXTRA_HELM_ARGS_KIBANA}
|
||||||
|
|
||||||
|
#NOTE: Wait for deploy
|
||||||
|
./tools/deployment/common/wait-for-pods.sh osh-infra
|
||||||
|
|
||||||
|
#NOTE: Validate Deployment info
|
||||||
|
helm status kibana
|
@ -19,11 +19,26 @@ set -xe
|
|||||||
#NOTE: Lint and package chart
|
#NOTE: Lint and package chart
|
||||||
make elastic-metricbeat
|
make elastic-metricbeat
|
||||||
|
|
||||||
|
tee /tmp/metricbeat.yaml << EOF
|
||||||
|
images:
|
||||||
|
tags:
|
||||||
|
metricbeat: docker.elastic.co/beats/metricbeat:7.1.0
|
||||||
|
conf:
|
||||||
|
metricbeat:
|
||||||
|
setup:
|
||||||
|
ilm:
|
||||||
|
enabled: false
|
||||||
|
endpoints:
|
||||||
|
elasticsearch:
|
||||||
|
namespace: osh-infra
|
||||||
|
kibana:
|
||||||
|
namespace: osh-infra
|
||||||
|
EOF
|
||||||
|
|
||||||
#NOTE: Deploy command
|
#NOTE: Deploy command
|
||||||
helm upgrade --install elastic-metricbeat ./elastic-metricbeat \
|
helm upgrade --install elastic-metricbeat ./elastic-metricbeat \
|
||||||
--namespace=kube-system \
|
--namespace=kube-system \
|
||||||
--set endpoints.kube_state_metrics.namespace=kube-system \
|
--values=/tmp/metricbeat.yaml
|
||||||
--set endpoints.elasticsearch.namespace=osh-infra
|
|
||||||
|
|
||||||
#NOTE: Wait for deploy
|
#NOTE: Wait for deploy
|
||||||
./tools/deployment/common/wait-for-pods.sh kube-system
|
./tools/deployment/common/wait-for-pods.sh kube-system
|
@ -19,10 +19,26 @@ set -xe
|
|||||||
#NOTE: Lint and package chart
|
#NOTE: Lint and package chart
|
||||||
make elastic-filebeat
|
make elastic-filebeat
|
||||||
|
|
||||||
|
tee /tmp/filebeat.yaml << EOF
|
||||||
|
images:
|
||||||
|
tags:
|
||||||
|
filebeat: docker.elastic.co/beats/filebeat:7.1.0
|
||||||
|
conf:
|
||||||
|
filebeat:
|
||||||
|
setup:
|
||||||
|
ilm:
|
||||||
|
enabled: false
|
||||||
|
endpoints:
|
||||||
|
elasticsearch:
|
||||||
|
namespace: osh-infra
|
||||||
|
kibana:
|
||||||
|
namespace: osh-infra
|
||||||
|
EOF
|
||||||
|
|
||||||
#NOTE: Deploy command
|
#NOTE: Deploy command
|
||||||
helm upgrade --install elastic-filebeat ./elastic-filebeat \
|
helm upgrade --install elastic-filebeat ./elastic-filebeat \
|
||||||
--namespace=kube-system \
|
--namespace=kube-system \
|
||||||
--set endpoints.elasticsearch.namespace=osh-infra
|
--values=/tmp/filebeat.yaml
|
||||||
|
|
||||||
#NOTE: Wait for deploy
|
#NOTE: Wait for deploy
|
||||||
./tools/deployment/common/wait-for-pods.sh kube-system
|
./tools/deployment/common/wait-for-pods.sh kube-system
|
@ -1,31 +0,0 @@
|
|||||||
#!/bin/bash
|
|
||||||
|
|
||||||
# Copyright 2017 The Openstack-Helm Authors.
|
|
||||||
#
|
|
||||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
||||||
# not use this file except in compliance with the License. You may obtain
|
|
||||||
# a copy of the License at
|
|
||||||
#
|
|
||||||
# http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
#
|
|
||||||
# Unless required by applicable law or agreed to in writing, software
|
|
||||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
||||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
||||||
# License for the specific language governing permissions and limitations
|
|
||||||
# under the License.
|
|
||||||
|
|
||||||
set -xe
|
|
||||||
|
|
||||||
#NOTE: Lint and package chart
|
|
||||||
make elastic-apm-server
|
|
||||||
|
|
||||||
#NOTE: Deploy command
|
|
||||||
helm upgrade --install elastic-apm-server ./elastic-apm-server \
|
|
||||||
--namespace=kube-system \
|
|
||||||
--set endpoints.elasticsearch.namespace=osh-infra
|
|
||||||
|
|
||||||
#NOTE: Wait for deploy
|
|
||||||
./tools/deployment/common/wait-for-pods.sh kube-system
|
|
||||||
|
|
||||||
#NOTE: Validate Deployment info
|
|
||||||
helm status elastic-apm-server
|
|
@ -19,11 +19,26 @@ set -xe
|
|||||||
#NOTE: Lint and package chart
|
#NOTE: Lint and package chart
|
||||||
make elastic-packetbeat
|
make elastic-packetbeat
|
||||||
|
|
||||||
|
tee /tmp/packetbeat.yaml << EOF
|
||||||
|
images:
|
||||||
|
tags:
|
||||||
|
filebeat: docker.elastic.co/beats/packetbeat:7.1.0
|
||||||
|
conf:
|
||||||
|
packetbeat:
|
||||||
|
setup:
|
||||||
|
ilm:
|
||||||
|
enabled: false
|
||||||
|
endpoints:
|
||||||
|
elasticsearch:
|
||||||
|
namespace: osh-infra
|
||||||
|
kibana:
|
||||||
|
namespace: osh-infra
|
||||||
|
EOF
|
||||||
|
|
||||||
#NOTE: Deploy command
|
#NOTE: Deploy command
|
||||||
helm upgrade --install elastic-packetbeat ./elastic-packetbeat \
|
helm upgrade --install elastic-packetbeat ./elastic-packetbeat \
|
||||||
--namespace=kube-system \
|
--namespace=kube-system \
|
||||||
--set endpoints.elasticsearch.namespace=osh-infra \
|
--values=/tmp/packetbeat.yaml
|
||||||
--set endpoints.kibana.namespace=osh-infra
|
|
||||||
|
|
||||||
#NOTE: Wait for deploy
|
#NOTE: Wait for deploy
|
||||||
./tools/deployment/common/wait-for-pods.sh kube-system
|
./tools/deployment/common/wait-for-pods.sh kube-system
|
@ -1 +0,0 @@
|
|||||||
../osh-infra-logging/075-kibana.sh
|
|
@ -347,29 +347,24 @@
|
|||||||
- job:
|
- job:
|
||||||
name: openstack-helm-infra-elastic-beats
|
name: openstack-helm-infra-elastic-beats
|
||||||
parent: openstack-helm-infra-functional
|
parent: openstack-helm-infra-functional
|
||||||
nodeset: openstack-helm-five-node-ubuntu
|
|
||||||
timeout: 7200
|
timeout: 7200
|
||||||
pre-run:
|
pre-run: playbooks/osh-infra-upgrade-host.yaml
|
||||||
- playbooks/osh-infra-upgrade-host.yaml
|
|
||||||
- playbooks/osh-infra-deploy-docker.yaml
|
|
||||||
- playbooks/osh-infra-build.yaml
|
|
||||||
- playbooks/osh-infra-deploy-k8s.yaml
|
|
||||||
run: playbooks/osh-infra-gate-runner.yaml
|
run: playbooks/osh-infra-gate-runner.yaml
|
||||||
post-run: playbooks/osh-infra-collect-logs.yaml
|
post-run: playbooks/osh-infra-collect-logs.yaml
|
||||||
|
nodeset: openstack-helm-single-node
|
||||||
vars:
|
vars:
|
||||||
gate_scripts:
|
gate_scripts:
|
||||||
- ./tools/deployment/elastic-beats/010-deploy-docker-registry.sh
|
- ./tools/deployment/elastic-beats/005-deploy-k8s.sh
|
||||||
- ./tools/deployment/elastic-beats/020-ingress.sh
|
- ./tools/deployment/elastic-beats/020-ingress.sh
|
||||||
- ./tools/deployment/elastic-beats/030-ceph.sh
|
- ./tools/deployment/elastic-beats/030-ceph.sh
|
||||||
- ./tools/deployment/elastic-beats/035-ceph-ns-activate.sh
|
- ./tools/deployment/elastic-beats/035-ceph-ns-activate.sh
|
||||||
- ./tools/deployment/elastic-beats/040-ldap.sh
|
- ./tools/deployment/elastic-beats/040-ldap.sh
|
||||||
- ./tools/deployment/elastic-beats/050-elasticsearch.sh
|
- ./tools/deployment/elastic-beats/050-elasticsearch.sh
|
||||||
- ./tools/deployment/elastic-beats/060-elastic-metricbeat.sh
|
- ./tools/deployment/elastic-beats/060-kibana.sh
|
||||||
- ./tools/deployment/elastic-beats/070-kube-state-metrics.sh
|
- ./tools/deployment/elastic-beats/070-kube-state-metrics.sh
|
||||||
- ./tools/deployment/elastic-beats/080-elastic-filebeat.sh
|
- ./tools/deployment/elastic-beats/080-elastic-metricbeat.sh
|
||||||
- ./tools/deployment/elastic-beats/090-elastic-packetbeat.sh
|
- ./tools/deployment/elastic-beats/090-elastic-filebeat.sh
|
||||||
- ./tools/deployment/elastic-beats/100-elastic-apm-server.sh
|
- ./tools/deployment/elastic-beats/100-elastic-packetbeat.sh
|
||||||
- ./tools/deployment/elastic-beats/110-kibana.sh
|
|
||||||
|
|
||||||
- job:
|
- job:
|
||||||
name: openstack-helm-infra-armada-deploy
|
name: openstack-helm-infra-armada-deploy
|
||||||
|
@ -59,15 +59,15 @@
|
|||||||
# - openstack-helm-infra-armada-deploy
|
# - openstack-helm-infra-armada-deploy
|
||||||
# - openstack-helm-infra-armada-update-uuid
|
# - openstack-helm-infra-armada-update-uuid
|
||||||
# - openstack-helm-infra-armada-update-passwords
|
# - openstack-helm-infra-armada-update-passwords
|
||||||
# experimental:
|
experimental:
|
||||||
# jobs:
|
jobs:
|
||||||
# NOTE(srwilkers): Disable fedora experimental jobs until issues resolved
|
# NOTE(srwilkers): Disable fedora experimental jobs until issues resolved
|
||||||
#- openstack-helm-infra-five-fedora
|
#- openstack-helm-infra-five-fedora
|
||||||
# NOTE(srwilkers): Disable centos experimental jobs until issues resolved
|
# NOTE(srwilkers): Disable centos experimental jobs until issues resolved
|
||||||
#- openstack-helm-infra-five-centos
|
#- openstack-helm-infra-five-centos
|
||||||
# - openstack-helm-infra-five-ubuntu
|
# - openstack-helm-infra-five-ubuntu
|
||||||
|
- openstack-helm-infra-elastic-beats
|
||||||
# - openstack-helm-infra-tenant-ceph
|
# - openstack-helm-infra-tenant-ceph
|
||||||
# - openstack-helm-infra-elastic-beats
|
|
||||||
# - openstack-helm-infra-armada-deploy
|
# - openstack-helm-infra-armada-deploy
|
||||||
# - openstack-helm-infra-armada-update-uuid
|
# - openstack-helm-infra-armada-update-uuid
|
||||||
# - openstack-helm-infra-armada-update-passwords
|
# - openstack-helm-infra-armada-update-passwords
|
||||||
|
Loading…
Reference in New Issue
Block a user