165 lines
5.4 KiB
YAML
165 lines
5.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
annotations:
|
|
argocd.argoproj.io/client-side-apply-migration-manager: argocd-controller
|
|
argocd.argoproj.io/sync-wave: "4"
|
|
name: alloy
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
namespace: monitoring
|
|
server: https://kubernetes.default.svc
|
|
project: default
|
|
source:
|
|
chart: alloy
|
|
helm:
|
|
values: |
|
|
# Discovers pods through the API and pushes their logs to Loki
|
|
networkPolicy:
|
|
enabled: true
|
|
ingress: []
|
|
egress:
|
|
- ports:
|
|
- port: 53
|
|
protocol: UDP
|
|
- port: 53
|
|
protocol: TCP
|
|
to:
|
|
- namespaceSelector:
|
|
matchLabels:
|
|
kubernetes.io/metadata.name: kube-system
|
|
podSelector:
|
|
matchLabels:
|
|
k8s-app: kube-dns
|
|
- ports:
|
|
- port: 6443
|
|
protocol: TCP
|
|
- ports:
|
|
- port: 3100
|
|
protocol: TCP
|
|
to:
|
|
- podSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: loki
|
|
alloy:
|
|
configMap:
|
|
content: |
|
|
discovery.kubernetes "pods" {
|
|
role = "pod"
|
|
namespaces {
|
|
names = ["garage", "postgres", "redoost", "traefik"]
|
|
}
|
|
selectors {
|
|
role = "pod"
|
|
field = "spec.nodeName=" + sys.env("HOSTNAME")
|
|
}
|
|
}
|
|
|
|
discovery.relabel "pods" {
|
|
targets = discovery.kubernetes.pods.targets
|
|
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_namespace"]
|
|
target_label = "namespace"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_name"]
|
|
target_label = "pod"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_controller_name"]
|
|
target_label = "workload"
|
|
}
|
|
// A deployment owns its pods through a ReplicaSet named <deployment>-<hash>.
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_controller_kind", "__meta_kubernetes_pod_controller_name"]
|
|
regex = "ReplicaSet;(.+)-[a-z0-9]+"
|
|
target_label = "workload"
|
|
}
|
|
// A cronjob's runs are Jobs named <cronjob>-<timestamp>.
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_controller_kind", "__meta_kubernetes_pod_controller_name"]
|
|
regex = "Job;(.+)-[0-9]+"
|
|
target_label = "workload"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_container_name"]
|
|
target_label = "container"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name", "__meta_kubernetes_pod_label_app"]
|
|
regex = "^;*([^;]+)(;.*)?$"
|
|
target_label = "app"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_node_name"]
|
|
target_label = "node"
|
|
}
|
|
rule {
|
|
source_labels = ["__meta_kubernetes_pod_uid", "__meta_kubernetes_pod_container_name"]
|
|
separator = "/"
|
|
replacement = "/var/log/pods/*$1/*.log"
|
|
target_label = "__path__"
|
|
}
|
|
}
|
|
|
|
local.file_match "pods" {
|
|
path_targets = discovery.relabel.pods.output
|
|
}
|
|
|
|
loki.source.file "pods" {
|
|
targets = local.file_match.pods.targets
|
|
forward_to = [loki.process.pods.receiver]
|
|
}
|
|
|
|
loki.process "pods" {
|
|
stage.cri {}
|
|
// Changes on every rotation and would start a new stream.
|
|
stage.label_drop {
|
|
values = ["filename"]
|
|
}
|
|
forward_to = [loki.write.default.receiver]
|
|
}
|
|
|
|
loki.write "default" {
|
|
endpoint {
|
|
url = "http://loki.monitoring.svc.cluster.local:3100/loki/api/v1/push"
|
|
}
|
|
}
|
|
mounts:
|
|
varlog: true
|
|
extra:
|
|
- name: storage
|
|
mountPath: /var/lib/alloy
|
|
# Tail positions survive pod restarts, so logs are not shipped twice.
|
|
storagePath: /var/lib/alloy
|
|
resources:
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
configReloader:
|
|
resources:
|
|
limits:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
controller:
|
|
volumes:
|
|
extra:
|
|
- name: storage
|
|
hostPath:
|
|
path: /var/lib/alloy
|
|
type: DirectoryOrCreate
|
|
repoURL: https://grafana.github.io/helm-charts
|
|
targetRevision: 1.13.1
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- ServerSideApply=true
|