diff --git a/charts/studio/Chart.lock b/charts/studio/Chart.lock index 3adf93a2..bcedf3a9 100644 --- a/charts/studio/Chart.lock +++ b/charts/studio/Chart.lock @@ -10,9 +10,9 @@ dependencies: version: 9.2.2 - name: vector repository: https://helm.vector.dev - version: 0.45.0 + version: 0.46.0 - name: vector repository: https://helm.vector.dev - version: 0.45.0 -digest: sha256:971a3d5864e123dad05c065bd32b04f1a3ece329c41aa0c08ddd256c2cbc12f7 -generated: "2025-09-09T22:38:17.455796+02:00" + version: 0.46.0 +digest: sha256:451f343aa91d71212017cb1c8f13ac4f7fdf6751f7a74a146f9f2c2e79a80d15 +generated: "2025-09-24T03:33:06.267202282Z" diff --git a/charts/studio/Chart.yaml b/charts/studio/Chart.yaml index 18039d0b..5d4a9f1e 100644 --- a/charts/studio/Chart.yaml +++ b/charts/studio/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: studio description: A Helm chart for Kubernetes type: application -version: 0.18.114 +version: 0.18.115 appVersion: "v2.212.0" maintainers: - name: iterative @@ -23,11 +23,11 @@ dependencies: repository: "https://charts.bitnami.com/bitnami" - name: vector condition: vector-agent.enabled - version: "0.45.0" + version: "0.46.0" repository: "https://helm.vector.dev" alias: vector-agent - name: vector condition: vector-aggregator.enabled - version: "0.45.0" + version: "0.46.0" repository: "https://helm.vector.dev" alias: vector-aggregator diff --git a/charts/studio/README.md b/charts/studio/README.md index f9a4bb7d..4e01586e 100644 --- a/charts/studio/README.md +++ b/charts/studio/README.md @@ -1,6 +1,6 @@ # studio -![Version: 0.18.114](https://img.shields.io/badge/Version-0.18.114-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.212.0](https://img.shields.io/badge/AppVersion-v2.212.0-informational?style=flat-square) +![Version: 0.18.115](https://img.shields.io/badge/Version-0.18.115-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v2.212.0](https://img.shields.io/badge/AppVersion-v2.212.0-informational?style=flat-square) A Helm chart for Kubernetes @@ -17,8 +17,8 @@ A Helm chart for Kubernetes | https://charts.bitnami.com/bitnami | clickhouse | 9.2.2 | | https://charts.bitnami.com/bitnami | postgresql | 16.7.2 | | https://charts.bitnami.com/bitnami | redis | 21.0.2 | -| https://helm.vector.dev | vector-agent(vector) | 0.45.0 | -| https://helm.vector.dev | vector-aggregator(vector) | 0.45.0 | +| https://helm.vector.dev | vector-agent(vector) | 0.46.0 | +| https://helm.vector.dev | vector-aggregator(vector) | 0.46.0 | ## Values @@ -251,15 +251,16 @@ A Helm chart for Kubernetes | studioWorker.strategy | object | `{"rollingUpdate":{"maxSurge":1,"maxUnavailable":0}}` | Worker deployment strategy | | studioWorker.terminationGracePeriodSeconds | int | `150` | Worker termination grace period | | studioWorker.tolerations | list | `[]` | Worker tolerations | -| vector-agent | object | `{"customConfig":{"api":{"enabled":false},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"vector_aggregator":{"address":"studio-vector-aggregator:6000","compression":true,"inputs":["kubernetes_logs_filtered","kubernetes_metrics_filtered","kubernetes_metrics_cadvisor_filtered"],"type":"vector"}},"sources":{"kubernetes_logs":{"ignore_older_secs":600,"type":"kubernetes_logs"},"kubernetes_metrics":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"},"kubernetes_metrics_cadvisor":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics/cadvisor"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"}},"transforms":{"kubernetes_logs_filtered":{"inputs":["kubernetes_logs"],"source":". = {\n \"message\": .message,\n \"source_type\": .source_type,\n \"stream\": .stream,\n \"timestamp\": .timestamp,\n \"kubernetes\": {\n \"pod_name\": .kubernetes.pod_name,\n \"namespace\": .kubernetes.pod_namespace,\n \"container_name\": .kubernetes.container_name\n }\n}\n","type":"remap"},"kubernetes_metrics_cadvisor_filtered":{"condition":".name == \"node_cpu_usage_seconds_total\" || .name == \"node_memory_working_set_bytes\" || .name == \"container_cpu_usage_seconds_total\" || .name == \"container_memory_working_set_bytes\" || .name == \"container_start_time_seconds\"","inputs":["kubernetes_metrics_cadvisor"],"type":"filter"},"kubernetes_metrics_filtered":{"condition":"starts_with!(.name, \"kubelet_volume_stats_\") || .name == \"kubelet_image_pull_duration_seconds\"","inputs":["kubernetes_metrics"],"type":"filter"}}},"defaultVolumeMounts":[{"mountPath":"/var/log/","name":"var-log","readOnly":true}],"defaultVolumes":[{"hostPath":{"path":"/var/log/"},"name":"var-log"}],"enabled":false,"env":[{"name":"KUBERNETES_SERVICE_ACCOUNT_TOKEN","valueFrom":{"secretKeyRef":{"key":"token","name":"studio-vector-agent-token"}}},{"name":"KUBERNETES_NODE_IP","valueFrom":{"fieldRef":{"fieldPath":"status.hostIP"}}}],"extraObjects":[{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"hook-failed, before-hook-creation"},"name":"studio-vector-agent-extended"},"rules":[{"apiGroups":[""],"resources":["nodes/metrics","nodes/stats"],"verbs":["get"]}]},{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"hook-failed, before-hook-creation"},"name":"studio-vector-agent-extended"},"roleRef":{"kind":"ClusterRole","name":"studio-vector-agent-extended"},"subjects":[{"kind":"ServiceAccount","name":"studio-vector-agent","namespace":"default"}]},{"apiVersion":"v1","kind":"Secret","metadata":{"annotations":{"kubernetes.io/service-account.name":"studio-vector-agent"},"name":"studio-vector-agent-token"},"type":"kubernetes.io/service-account-token"}],"fullnameOverride":"studio-vector-agent","image":{"base":"alpine"},"persistence":{"hostPath":{"enabled":false}},"role":"Agent","serviceAccount":{"create":true,"name":"studio-vector-agent"},"tolerations":[{"operator":"Exists"}]}` | Vector Agent configuration for log collection (DaemonSet) | +| vector-agent | object | `{"customConfig":{"api":{"enabled":false},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"vector_aggregator":{"address":"studio-vector-aggregator:6000","compression":true,"inputs":["kubernetes_logs_filtered","kubernetes_metrics_filtered","kubernetes_metrics_cadvisor_filtered"],"type":"vector"}},"sources":{"kubernetes_logs":{"ignore_older_secs":600,"type":"kubernetes_logs"},"kubernetes_metrics":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"},"kubernetes_metrics_cadvisor":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics/cadvisor"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"}},"transforms":{"kubernetes_logs_filtered":{"inputs":["kubernetes_logs"],"source":". = {\n \"message\": .message,\n \"source_type\": .source_type,\n \"stream\": .stream,\n \"timestamp\": .timestamp,\n \"kubernetes\": {\n \"pod_name\": .kubernetes.pod_name,\n \"namespace\": .kubernetes.pod_namespace,\n \"container_name\": .kubernetes.container_name\n }\n}\n","type":"remap"},"kubernetes_metrics_cadvisor_filtered":{"condition":".name == \"node_cpu_usage_seconds_total\" || .name == \"node_memory_working_set_bytes\" || .name == \"container_cpu_usage_seconds_total\" || .name == \"container_memory_working_set_bytes\" || .name == \"container_start_time_seconds\"","inputs":["kubernetes_metrics_cadvisor"],"type":"filter"},"kubernetes_metrics_filtered":{"condition":"starts_with!(.name, \"kubelet_volume_stats_\") || .name == \"kubelet_image_pull_duration_seconds\"","inputs":["kubernetes_metrics"],"type":"filter"}}},"defaultVolumeMounts":[{"mountPath":"/var/log/","name":"var-log","readOnly":true}],"defaultVolumes":[{"hostPath":{"path":"/var/log/"},"name":"var-log"}],"enabled":false,"env":[{"name":"KUBERNETES_SERVICE_ACCOUNT_TOKEN","valueFrom":{"secretKeyRef":{"key":"token","name":"studio-vector-agent-token"}}},{"name":"KUBERNETES_NODE_IP","valueFrom":{"fieldRef":{"fieldPath":"status.hostIP"}}}],"extraObjects":[{"apiVersion":"v1","kind":"Secret","metadata":{"annotations":{"kubernetes.io/service-account.name":"studio-vector-agent"},"name":"studio-vector-agent-token"},"type":"kubernetes.io/service-account-token"}],"fullnameOverride":"studio-vector-agent","image":{"base":"alpine"},"persistence":{"hostPath":{"enabled":false}},"rbac":{"extraRules":[{"apiGroups":[""],"resources":["nodes/metrics","nodes/stats"],"verbs":["get"]}]},"role":"Agent","serviceAccount":{"create":true,"name":"studio-vector-agent"},"tolerations":[{"operator":"Exists"}]}` | Vector Agent configuration for log collection (DaemonSet) | | vector-agent.customConfig | object | `{"api":{"enabled":false},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"vector_aggregator":{"address":"studio-vector-aggregator:6000","compression":true,"inputs":["kubernetes_logs_filtered","kubernetes_metrics_filtered","kubernetes_metrics_cadvisor_filtered"],"type":"vector"}},"sources":{"kubernetes_logs":{"ignore_older_secs":600,"type":"kubernetes_logs"},"kubernetes_metrics":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"},"kubernetes_metrics_cadvisor":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"endpoints":["https://${KUBERNETES_NODE_IP}:10250/metrics/cadvisor"],"scrape_interval_secs":30,"tls":{"verify_certificate":false},"type":"prometheus_scrape"}},"transforms":{"kubernetes_logs_filtered":{"inputs":["kubernetes_logs"],"source":". = {\n \"message\": .message,\n \"source_type\": .source_type,\n \"stream\": .stream,\n \"timestamp\": .timestamp,\n \"kubernetes\": {\n \"pod_name\": .kubernetes.pod_name,\n \"namespace\": .kubernetes.pod_namespace,\n \"container_name\": .kubernetes.container_name\n }\n}\n","type":"remap"},"kubernetes_metrics_cadvisor_filtered":{"condition":".name == \"node_cpu_usage_seconds_total\" || .name == \"node_memory_working_set_bytes\" || .name == \"container_cpu_usage_seconds_total\" || .name == \"container_memory_working_set_bytes\" || .name == \"container_start_time_seconds\"","inputs":["kubernetes_metrics_cadvisor"],"type":"filter"},"kubernetes_metrics_filtered":{"condition":"starts_with!(.name, \"kubelet_volume_stats_\") || .name == \"kubelet_image_pull_duration_seconds\"","inputs":["kubernetes_metrics"],"type":"filter"}}}` | Vector Agent configuration | | vector-agent.enabled | bool | `false` | Vector Agent enabled | | vector-agent.fullnameOverride | string | `"studio-vector-agent"` | Vector Agent name override | | vector-agent.image.base | string | `"alpine"` | The base to use for Vector's image. | +| vector-agent.rbac | object | `{"extraRules":[{"apiGroups":[""],"resources":["nodes/metrics","nodes/stats"],"verbs":["get"]}]}` | Vector Agent ClusterRole configuration | | vector-agent.role | string | `"Agent"` | Deploy as DaemonSet for log collection from all nodes | | vector-agent.serviceAccount | object | `{"create":true,"name":"studio-vector-agent"}` | Vector Agent service account | | vector-agent.tolerations | list | `[{"operator":"Exists"}]` | Vector Agent tolerations | -| vector-aggregator | object | `{"args":["while sleep 60; do find /data/vector/logs -type f -mtime +7 -delete; done &\nexec /usr/local/bin/vector --config-dir /etc/vector/"],"command":["/bin/sh","-c"],"customConfig":{"api":{"address":"0.0.0.0:8686","enabled":true,"playground":true},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"events_file":{"encoding":{"codec":"json"},"inputs":["kubernetes_events_deduped"],"path":"/data/vector/events/%Y-%m-%d.log","type":"file"},"logs_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.logs"],"path":"/data/vector/logs/%Y-%m-%d-{{ \"{{\" }} .kubernetes.pod_name {{ \"}}\" }}.log","type":"file"},"metrics_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.metrics"],"path":"/data/vector/metrics/%Y-%m-%d.log","type":"file"}},"sources":{"kubernetes_events":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"decoding":{"codec":"json"},"endpoint":"https://kubernetes.default.svc:443/api/v1/events","headers":{"Accept":["application/json"]},"scrape_interval_secs":30,"tls":{"ca_file":"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"},"type":"http_client"},"vector_agent":{"address":"0.0.0.0:6000","type":"vector","version":"2"}},"transforms":{"kubernetes_events_deduped":{"fields":{"match":["node_name","object_name","message","timestamp"]},"inputs":["kubernetes_events_normalized"],"type":"dedupe"},"kubernetes_events_normalized":{"inputs":["kubernetes_events_unnested"],"source":". = {\n \"run_id\": null,\n \"node_name\": .items.reportingInstance,\n \"object_name\": .items.involvedObject.name,\n \"timestamp\": .items.lastTimestamp,\n \"message\": .items.message,\n \"raw\": .\n}\n","type":"remap"},"kubernetes_events_unnested":{"inputs":["kubernetes_events"],"source":". = unnest!(.items)\n","type":"remap"},"vector_agent_route":{"inputs":["vector_agent"],"route":{"logs":{"type":"is_log"},"metrics":{"type":"is_metric"}},"type":"route"}}},"enabled":false,"env":[{"name":"KUBERNETES_SERVICE_ACCOUNT_TOKEN","valueFrom":{"secretKeyRef":{"key":"token","name":"studio-vector-aggregator-token"}}}],"extraObjects":[{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRole","metadata":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"hook-failed, before-hook-creation"},"name":"studio-vector-aggregator-extended"},"rules":[{"apiGroups":[""],"resources":["events"],"verbs":["get","list"]}]},{"apiVersion":"rbac.authorization.k8s.io/v1","kind":"ClusterRoleBinding","metadata":{"annotations":{"helm.sh/hook":"pre-install, pre-upgrade","helm.sh/hook-delete-policy":"hook-failed, before-hook-creation"},"name":"studio-vector-aggregator-extended"},"roleRef":{"kind":"ClusterRole","name":"studio-vector-aggregator-extended"},"subjects":[{"kind":"ServiceAccount","name":"studio-vector-aggregator","namespace":"default"}]},{"apiVersion":"v1","kind":"Secret","metadata":{"annotations":{"kubernetes.io/service-account.name":"studio-vector-aggregator"},"name":"studio-vector-aggregator-token"},"type":"kubernetes.io/service-account-token"}],"fullnameOverride":"studio-vector-aggregator","image":{"base":"alpine"},"persistence":{"accessModes":["ReadWriteOnce"],"enabled":true,"size":"64Gi","storageClass":""},"replicaCount":1,"resources":{"limits":{"memory":"512Mi"},"requests":{"cpu":"200m","memory":"256Mi"}},"role":"Aggregator","service":{"enabled":true,"ports":[{"name":"logs","port":6000,"protocol":"TCP","targetPort":6000},{"name":"api","port":8686,"protocol":"TCP","targetPort":8686}],"type":"ClusterIP"},"serviceAccount":{"create":true,"name":"studio-vector-aggregator"}}` | Vector Aggregator configuration for log aggregation and processing | +| vector-aggregator | object | `{"args":["while sleep 60; do find /data/vector/logs -type f -mtime +7 -delete; done &\nexec /usr/local/bin/vector --config-dir /etc/vector/"],"command":["/bin/sh","-c"],"customConfig":{"api":{"address":"0.0.0.0:8686","enabled":true,"playground":true},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"events_file":{"encoding":{"codec":"json"},"inputs":["kubernetes_events_deduped"],"path":"/data/vector/events/%Y-%m-%d.log","type":"file"},"logs_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.logs"],"path":"/data/vector/logs/%Y-%m-%d-{{ \"{{\" }} .kubernetes.pod_name {{ \"}}\" }}.log","type":"file"},"metrics_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.metrics"],"path":"/data/vector/metrics/%Y-%m-%d.log","type":"file"}},"sources":{"kubernetes_events":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"decoding":{"codec":"json"},"endpoint":"https://kubernetes.default.svc:443/api/v1/events","headers":{"Accept":["application/json"]},"scrape_interval_secs":30,"tls":{"ca_file":"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"},"type":"http_client"},"vector_agent":{"address":"0.0.0.0:6000","type":"vector","version":"2"}},"transforms":{"kubernetes_events_deduped":{"fields":{"match":["node_name","object_name","message","timestamp"]},"inputs":["kubernetes_events_normalized"],"type":"dedupe"},"kubernetes_events_normalized":{"inputs":["kubernetes_events_unnested"],"source":". = {\n \"run_id\": null,\n \"node_name\": .items.reportingInstance,\n \"object_name\": .items.involvedObject.name,\n \"timestamp\": .items.lastTimestamp,\n \"message\": .items.message,\n \"raw\": .\n}\n","type":"remap"},"kubernetes_events_unnested":{"inputs":["kubernetes_events"],"source":". = unnest!(.items)\n","type":"remap"},"vector_agent_route":{"inputs":["vector_agent"],"route":{"logs":{"type":"is_log"},"metrics":{"type":"is_metric"}},"type":"route"}}},"enabled":false,"env":[{"name":"KUBERNETES_SERVICE_ACCOUNT_TOKEN","valueFrom":{"secretKeyRef":{"key":"token","name":"studio-vector-aggregator-token"}}}],"extraObjects":[{"apiVersion":"v1","kind":"Secret","metadata":{"annotations":{"kubernetes.io/service-account.name":"studio-vector-aggregator"},"name":"studio-vector-aggregator-token"},"type":"kubernetes.io/service-account-token"}],"fullnameOverride":"studio-vector-aggregator","image":{"base":"alpine"},"persistence":{"accessModes":["ReadWriteOnce"],"enabled":true,"size":"64Gi","storageClass":""},"rbac":{"extraRules":[{"apiGroups":[""],"resources":["events"],"verbs":["get","list"]}]},"replicaCount":1,"resources":{"limits":{"memory":"512Mi"},"requests":{"cpu":"200m","memory":"256Mi"}},"role":"Aggregator","service":{"enabled":true,"ports":[{"name":"logs","port":6000,"protocol":"TCP","targetPort":6000},{"name":"api","port":8686,"protocol":"TCP","targetPort":8686}],"type":"ClusterIP"},"serviceAccount":{"create":true,"name":"studio-vector-aggregator"}}` | Vector Aggregator configuration for log aggregation and processing | | vector-aggregator.args | list | `["while sleep 60; do find /data/vector/logs -type f -mtime +7 -delete; done &\nexec /usr/local/bin/vector --config-dir /etc/vector/"]` | Vector arguments. | | vector-aggregator.command | list | `["/bin/sh","-c"]` | Vector command. | | vector-aggregator.customConfig | object | `{"api":{"address":"0.0.0.0:8686","enabled":true,"playground":true},"data_dir":"/data/vector","expire_metrics_secs":60,"sinks":{"events_file":{"encoding":{"codec":"json"},"inputs":["kubernetes_events_deduped"],"path":"/data/vector/events/%Y-%m-%d.log","type":"file"},"logs_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.logs"],"path":"/data/vector/logs/%Y-%m-%d-{{ \"{{\" }} .kubernetes.pod_name {{ \"}}\" }}.log","type":"file"},"metrics_file":{"encoding":{"codec":"json"},"inputs":["vector_agent_route.metrics"],"path":"/data/vector/metrics/%Y-%m-%d.log","type":"file"}},"sources":{"kubernetes_events":{"auth":{"strategy":"bearer","token":"${KUBERNETES_SERVICE_ACCOUNT_TOKEN:?}"},"decoding":{"codec":"json"},"endpoint":"https://kubernetes.default.svc:443/api/v1/events","headers":{"Accept":["application/json"]},"scrape_interval_secs":30,"tls":{"ca_file":"/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"},"type":"http_client"},"vector_agent":{"address":"0.0.0.0:6000","type":"vector","version":"2"}},"transforms":{"kubernetes_events_deduped":{"fields":{"match":["node_name","object_name","message","timestamp"]},"inputs":["kubernetes_events_normalized"],"type":"dedupe"},"kubernetes_events_normalized":{"inputs":["kubernetes_events_unnested"],"source":". = {\n \"run_id\": null,\n \"node_name\": .items.reportingInstance,\n \"object_name\": .items.involvedObject.name,\n \"timestamp\": .items.lastTimestamp,\n \"message\": .items.message,\n \"raw\": .\n}\n","type":"remap"},"kubernetes_events_unnested":{"inputs":["kubernetes_events"],"source":". = unnest!(.items)\n","type":"remap"},"vector_agent_route":{"inputs":["vector_agent"],"route":{"logs":{"type":"is_log"},"metrics":{"type":"is_metric"}},"type":"route"}}}` | Vector Aggregator configuration | @@ -267,6 +268,7 @@ A Helm chart for Kubernetes | vector-aggregator.fullnameOverride | string | `"studio-vector-aggregator"` | Vector Aggregator name override | | vector-aggregator.image.base | string | `"alpine"` | The base to use for Vector's image. | | vector-aggregator.persistence | object | `{"accessModes":["ReadWriteOnce"],"enabled":true,"size":"64Gi","storageClass":""}` | Vector Aggregator persistence configuration | +| vector-aggregator.rbac | object | `{"extraRules":[{"apiGroups":[""],"resources":["events"],"verbs":["get","list"]}]}` | Vector Aggregator ClusterRole configuration | | vector-aggregator.replicaCount | int | `1` | Vector Aggregator replica count | | vector-aggregator.resources | object | `{"limits":{"memory":"512Mi"},"requests":{"cpu":"200m","memory":"256Mi"}}` | Vector Aggregator resources | | vector-aggregator.role | string | `"Aggregator"` | Deploy as StatefulSet for aggregation and persistence | diff --git a/charts/studio/values.yaml b/charts/studio/values.yaml index 1f14f030..6f27e7d7 100644 --- a/charts/studio/values.yaml +++ b/charts/studio/values.yaml @@ -1056,6 +1056,17 @@ vector-agent: create: true name: studio-vector-agent + # -- Vector Agent ClusterRole configuration + rbac: + extraRules: + - apiGroups: + - "" + resources: + - nodes/metrics + - nodes/stats + verbs: + - get + # -- Vector Agent configuration customConfig: data_dir: /data/vector @@ -1129,38 +1140,6 @@ vector-agent: fieldPath: status.hostIP extraObjects: - - apiVersion: rbac.authorization.k8s.io/v1 - kind: ClusterRole - metadata: - name: studio-vector-agent-extended - annotations: - helm.sh/hook: pre-install, pre-upgrade - helm.sh/hook-delete-policy: hook-failed, before-hook-creation - - rules: - - apiGroups: - - "" - resources: - - nodes/metrics - - nodes/stats - verbs: - - get - - - apiVersion: rbac.authorization.k8s.io/v1 - kind: ClusterRoleBinding - metadata: - name: studio-vector-agent-extended - annotations: - helm.sh/hook: pre-install, pre-upgrade - helm.sh/hook-delete-policy: hook-failed, before-hook-creation - subjects: - - kind: ServiceAccount - name: studio-vector-agent - namespace: default # FIXME: should be configurable - roleRef: - kind: ClusterRole - name: studio-vector-agent-extended - - apiVersion: v1 kind: Secret metadata: @@ -1204,6 +1183,17 @@ vector-aggregator: create: true name: studio-vector-aggregator + # -- Vector Aggregator ClusterRole configuration + rbac: + extraRules: + - apiGroups: + - "" + resources: + - events + verbs: + - get + - list + # -- Vector Aggregator resources resources: limits: @@ -1329,38 +1319,6 @@ vector-aggregator: key: token extraObjects: - - apiVersion: rbac.authorization.k8s.io/v1 - kind: ClusterRole - metadata: - name: studio-vector-aggregator-extended - annotations: - helm.sh/hook: pre-install, pre-upgrade - helm.sh/hook-delete-policy: hook-failed, before-hook-creation - - rules: - - apiGroups: - - "" - resources: - - events - verbs: - - get - - list - - - apiVersion: rbac.authorization.k8s.io/v1 - kind: ClusterRoleBinding - metadata: - name: studio-vector-aggregator-extended - annotations: - helm.sh/hook: pre-install, pre-upgrade - helm.sh/hook-delete-policy: hook-failed, before-hook-creation - subjects: - - kind: ServiceAccount - name: studio-vector-aggregator - namespace: default # FIXME: should be configurable - roleRef: - kind: ClusterRole - name: studio-vector-aggregator-extended - - apiVersion: v1 kind: Secret metadata: