Further configuration

Author: YuryHrytsuk

charts/aws-ebs-csi-driver/values.yaml.gotmpl

@@ -5,7 +5,7 @@ image:
     tag: "v1.38.1"
 
 storageClasses:
-  - name: "ebs-sc"
+  - name: "{{ .Values.ebsStorageClassName }}"
     parameters:
         type: "gp3"
     allowVolumeExpansion: true

charts/elastic-stack/values.yaml.gotmpl

@@ -1,5 +1,13 @@
+# App-level settings (e.g. elasticsearch, kibana)
+
 # https://github.com/elastic/cloud-on-k8s/blob/3.0/deploy/eck-stack/charts/eck-elasticsearch/values.yaml
+
 eck-elasticsearch:
+  # access internally over plain http
+  http:
+    tls:
+      selfSignedCertificate:
+        disabled: true
   nodeSets:
     - name: default
       count: 1
@@ -16,11 +24,12 @@ eck-elasticsearch:
             resources:
               requests:
                 storage: 20Gi
-            storageClassName:
+            storageClassName: "{{ .Values.ebsStorageClassName }}"
+
       podTemplate:
-        nodeSelector:
-          ops: true
         spec:
+          nodeSelector:
+            ops: "true"
           containers:
             - name: elasticsearch
 
@@ -36,4 +45,54 @@ eck-elasticsearch:
                   memory: 2Gi
                 requests:
                   cpu: 0.5
-                  memory: 512Mi
+                  memory: 2Gi
+
+# https://github.com/elastic/cloud-on-k8s/blob/3.0/deploy/eck-stack/charts/eck-kibana/values.yaml
+
+eck-kibana:
+  count: 1
+  podTemplate:
+    spec:
+      nodeSelector:
+        ops: "true"
+      containers:
+        - name: kibana
+          env:
+            # https://discuss.elastic.co/t/ingress-for-kibana-dashboard-when-using-kubernetes-traefik/198236
+            - name: "SERVER_BASEPATH"
+              value: "/kibana"
+            - name: "SERVER_REWRITEBASEPATH"
+              value: "true"
+            - name: "SERVER_PUBLICBASEURL"
+              value: "https://{{ requiredEnv "K8S_MONITORING_FQDN" }}/kibana"
+          resources:
+            requests:
+              memory: 1Gi
+              cpu: 0.5
+            limits:
+              memory: 1Gi
+              cpu: 1
+  # tls fails if this is not disabled
+  # https://github.com/elastic/cloud-on-k8s/issues/2118#issuecomment-558981590
+  http:
+    tls:
+      selfSignedCertificate:
+        disabled: true
+  # https://github.com/elastic/cloud-on-k8s/blob/3.0/deploy/eck-stack/charts/eck-kibana/templates/ingress.yaml
+  ingress:
+    annotations:
+      # kibana has built-in auth support
+      # kibana can be configured to be served from a /kibana path (no strip middleware needed)
+      namespace: {{ .Release.Namespace }}
+      cert-manager.io/cluster-issuer: "cert-issuer"
+      traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    enabled: true
+    tls:
+      enabled: true
+      hosts:
+        - {{ requiredEnv "K8S_MONITORING_FQDN" }}
+      secretName: monitoring-tls
+    hosts:
+      - host: {{ requiredEnv "K8S_MONITORING_FQDN" }}
+        path: /kibana
+        pathType: Prefix

charts/portainer/values.ebs-pv.yaml.gotmpl

@@ -1,4 +1,4 @@
 persistence:
   enabled: true
   size: "1Gi"  # minimal size for gp3 is 1Gi
-  storageClass: "ebs-sc"
+  storageClass: "{{ .Values.ebsStorageClassName }}"

charts/portainer/values.longhorn-pv.yaml.gotmpl

@@ -1,4 +1,4 @@
 persistence:
   enabled: true
   size: "300Mi" # cannot be lower https://github.com/longhorn/longhorn/issues/8488
-  storageClass: "{{.Values.longhornStorageClassName}}"
+  storageClass: "{{ .Values.longhornStorageClassName }}"

charts/vector/values.yaml.gotmpl

@@ -0,0 +1,35 @@
+role: "Agent"
+
+env:
+    - name: ELASTICSEARCH_USERNAME
+      value: &elasticsearch_username lastic
+    - name: ELASTICSEARCH_PASSWORD
+        valueFrom:
+            secretKeyRef:
+                name: elasticsearch-es-elastic-user
+                key: *elasticsearch_username
+
+customConfig:
+    dataDir: /vector-data-dir
+
+    sources:
+        kubernetes_logs:
+            type: kubernetes_logs
+
+    sinks:
+        es_out:
+            type: elasticsearch
+            inputs: ["kubernetes_logs"]
+            endpoint: "http://your-elasticsearch-cluster:9200"
+            auth:
+                username: "${ELASTICSEARCH_USERNAME}"
+                password: "${ELASTICSEARCH_PASSWORD}"
+            index: "vector-k8s-%F"
+
+resources:
+  requests:
+    cpu: 200m
+    memory: 256Mi
+  limits:
+    cpu: 200m
+    memory: 256Mi