commit bc327e307b5484da66b0fb7f9a3e8b47e85f8c4b parent 2147e03211e3f878921aada154641396817b6628 Author: MTRNord <mtrnord1@gmail.com> Date: Sat, 18 Nov 2023 23:10:23 +0100 Setup tetragon and friends Diffstat:
18 files changed, 281 insertions(+), 10 deletions(-)
diff --git a/apps/base/parseable/kustomization.yaml b/apps/base/parseable/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: parseable +resources: + - repository.yaml + - release.yaml diff --git a/apps/base/parseable/release.yaml b/apps/base/parseable/release.yaml @@ -0,0 +1,28 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: parseable + namespace: parseable +spec: + releaseName: parseable + chart: + spec: + version: '0.7.1' + chart: parseable + sourceRef: + kind: HelmRepository + name: parseable + interval: 50m + timeout: 25m + install: + timeout: 25m + remediation: + retries: 3 + values: + tolerations: + - key: "arch" + operator: "Equal" + value: "arm64" + effect: "NoSchedule" + parseable: + local: true diff --git a/apps/base/parseable/repository.yaml b/apps/base/parseable/repository.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: parseable + namespace: parseable +spec: + interval: 5m + url: https://charts.parseable.io diff --git a/apps/base/tetragon/kustomization.yaml b/apps/base/tetragon/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: tetragon +resources: + - repository.yaml + - release.yaml diff --git a/apps/base/tetragon/release.yaml b/apps/base/tetragon/release.yaml @@ -0,0 +1,27 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: tetragon + namespace: tetragon +spec: + releaseName: tetragon + chart: + spec: + version: "1.0.0" + chart: tetragon + sourceRef: + kind: HelmRepository + name: tetragon + interval: 50m + timeout: 25m + install: + timeout: 25m + remediation: + retries: 3 + values: + tolerations: + - operator: Exists + - key: "arch" + operator: "Equal" + value: "arm64" + effect: "NoSchedule" diff --git a/apps/base/tetragon/repository.yaml b/apps/base/tetragon/repository.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: tetragon + namespace: tetragon +spec: + interval: 5m + url: https://helm.cilium.io diff --git a/apps/base/vector/kustomization.yaml b/apps/base/vector/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: vector +resources: + - repository.yaml + - release.yaml diff --git a/apps/base/vector/release.yaml b/apps/base/vector/release.yaml @@ -0,0 +1,38 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: vector + namespace: vector +spec: + releaseName: vector + chart: + spec: + chart: vector + sourceRef: + kind: HelmRepository + name: vector + interval: 50m + timeout: 25m + install: + timeout: 25m + remediation: + retries: 3 + values: + tolerations: + - key: "arch" + operator: "Equal" + value: "arm64" + effect: "NoSchedule" + role: "Agent" + rollWorkload: true + # extraVolumes -- Additional Volumes to use with Vector Pods. + extraVolumes: + - name: tetra-log + hostPath: + path: "/var/run/cilium/tetragon/" + + # extraVolumeMounts -- Additional Volume to mount into Vector Containers. + extraVolumeMounts: + - name: tetra-log + mountPath: "/var/run/cilium/tetragon/" + readOnly: true diff --git a/apps/base/vector/repository.yaml b/apps/base/vector/repository.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta2 +kind: HelmRepository +metadata: + name: vector + namespace: vector +spec: + interval: 5m + url: https://helm.vector.dev diff --git a/apps/namespaces/kustomization.yaml b/apps/namespaces/kustomization.yaml @@ -14,3 +14,6 @@ resources: - zammad.yaml - nfs-server.yaml - forgejo.yaml + - tetragon.yaml + - vector.yaml + - parseable.yaml diff --git a/apps/namespaces/parseable.yaml b/apps/namespaces/parseable.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: parseable diff --git a/apps/namespaces/tetragon.yaml b/apps/namespaces/tetragon.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: tetragon diff --git a/apps/namespaces/vector.yaml b/apps/namespaces/vector.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: vector diff --git a/apps/production/kustomization.yaml b/apps/production/kustomization.yaml @@ -14,6 +14,9 @@ resources: - ../base/tempo - ../base/zammad - ../base/forgejo + - ../base/tetragon + - ../base/vector + - ../base/parseable - sliding-proxy-ingress.yaml - pvcs-mjolnir.yaml - nfs-server.yaml @@ -33,3 +36,4 @@ patchesStrategicMerge: #- mailu-values.yaml - synapse-draupnir.yaml - forgejo.yaml + - vector-values.yaml diff --git a/apps/production/secrets/draupnir-appservice-secret.yaml b/apps/production/secrets/draupnir-appservice-secret.yaml @@ -5,9 +5,9 @@ metadata: namespace: matrix type: Opaque stringData: - config.appservice.yaml: ENC[AES256_GCM,data:jqbOMyxDMuD3n4+9D+mReZNe+VzRtd28SCg4sbW0uBUZf8+0zUuJceTK3B5pqH6mbWwoRHJo0t9LFLAk48JLXMPDKp6rB99my8FeXLCwu8UBTYdR3+w8xW9bxVoQDzlxvspE2uMcTASfDM97W09GrNTHIE9eeMDYzGnkRxvceRgW2iMRGVxYA+zqGs3nqGLKRY37JJCbwcIqIgdUasEji00mNDS6IDEoWJtxV/xezGWaL2SiEAJpXmSh8kZh3zq11ymrNVvt/GZxWlpNtIwcZWNvc3R9nHsWVXU5+9E65mtHRx+UHuAwfARrXaqCXmoOMDcS6d1z3iRytWW2cYQRHZQ5Kd9jNLvxHm4vQTQtDoez4FSIS5kFzp0wKpyBA14ReE1nKlnDquGsbN/nhikOd7h76r32h7DBeKVQZeywxJYLHSIj5V1URI4qdjca+Hc5Qmm6sbbKAjGuj+Dii+OVAMaYOvvdeqleX9pdK3uOI/NINfIxYyZBkZ3EwXGV+OQgpE+xf++J/zGgIuqkKSQFFLC+6aWij5au29unUZLpNn6VkZKk4+HD/VbeHgW2XsEaF0KhYj/x9+IXrzObhdoOdINBxP5uGtzedBxDJlr62xdHgq2rlWCgSwzA8gaqjVJIGlZazAhine5MIf8zg5zm4QB9r6wUZu8BMJsGoO2Oii5/XiLK/iZsog1Ldlaz92zztDet1QuPsyj1z+EAsuyh9QGyWZNPXl/UQhWQap5iZxoRR30n4e/EJFsilqJsSonhEZ9gZt7IVfgd+tx/LF+tREZx/Tw/nBz5A5NCMSmDjBw48pza7U/I8Lxu6qWNY86Wp7YtA4nQaA7YuMJo8br3CVxLYQynykhkiQQFjhpn75mqgjRZchPBg+N+VX2X4OMTmckzTyqjfA2B2slngCpLTsDKFWrE7/apgX+Kjl/i6gFBOKDy+qlYUtKNXsGx6PpfkA8bvLMyck27y2eCrKOb46sny4b01u5vamlq6MG/e8GEouh2yik3e9HDt1gbWQSGal6oFtH2LFctkK2oMMRd29qK/HKWYFyL85LR5cuj2AA=,iv:525xquiJtw/E1K5cNqtTREK1K0LOt4YWLvS5dzjTtZA=,tag:cP6kN2RzBJyfBSoXYsWCvw==,type:str] - draupnir-registration.yaml: ENC[AES256_GCM,data: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,iv:zKpxX7eySD4QY/n3SPOwy84NESsnPyR4SV4sZSOpXQQ=,tag:8pEQtYv/3x21hUTbajdakw==,type:str] - draupnir-config.yaml: ENC[AES256_GCM,data:2MWbqZSn6kWtpSoTwQOrz9j/Lvr9yXpXAHjCv3YVjKf1tb4KJJ5rgb1IbrHdSSuHwtWU0RYmXgCzLVJ0INcter7puESBQ8BjkpqzxvmbEA1PyWcF8GNB3A2cP0v8SF0590qkgq3EDqkHuCx73yunRb68Px7VC+WMVsOlaeKbG0KPFh+ILPNWt1kRbyfk1H9q7IfBL8D1DD7bZsy4T1dM3CggrFv6WlpjX5QfVMXlb5cNeTzHjqqoDG0Mz9q9iXSb/IP/gEWKdpN769OMT7O3dORAdzRNKZViw/vvURYJ45pWzOPMBwIZ/9fnQGgcdVPN/MoEVFyjMrKET2y6MHEXBmV+i6ToLbU+y8aPlpFrF5QGZ/mCpFqA6dryJVNw+LcJVYNQYmkZHvSFvcn/5YDguQl3UegD7N6I321swykvnr4wdb6OF4Fbesw56l9OMuNupxGo8rt1KKiNVGu6AMVZOGrZm/RSpes0P0aIQwJ+yai+JtO19fJSidn2wVfjimb/8VAAMujo0Ljv7VIEehmspg6X1F33Gm/UhSUdQ+qCrhfyA6nHsHVGHCB1qRe76jY/M82A+hoWtn19iWx3mVjkE58ea+gcPzoi6n2SIyGBOymAmfyj6tseF2JOhAp5rcR/NUWldFGVDLRMIkxgKl3lGV6g6sMIqTZdXBGResH1GMUWGtSgiMyRvHPZn0RjX/jibwpiQsvj+uk4QplOGDB59QlC35qnHhyyPAv4XGW7HhNVhVouXVF5M6mF6C2GF3DMkSCaI3zWnGHu9PXwY4VEUybHgYGfnQc4ozfS/O0LlOOC6oHLaxzUCP4QQSvldWtiF8mLoupWyvreN7TYHBYoWElwasJp/pGL02arCQoDfUbBAj/PpHmK3Zj0ctKHeN2jY7BJDKimD0YCIt0cOTm0SzWwgEKiPhmfqSOGxd+T1uzXUWv7aQwweSH7+5SCbX59o59nK4R4sXIe7DRY8pVmhc8GRlkAQ10OkNHhoZxJ4HldRn6QNX56R1eTSU7AO025RXaOAv3uLlhoK1QTnqY73vrgHBMdd5LgYzsrk7Zas+STmx4swr4J4fqAH/4OsEjF4+xpxKhswrfwS9LVejBDhRH/nUopkwMERwhTM8FedHU2eGiZlBsKljoa7O9UCfpNErQvi2yOmDiy8xlZ3TOMDBkcheTuR+tas9NvWdMsSGR/SwnKklxp9wI1f3m8uZsd1+lAxdfoahOMKbZjBoI5IBHGK9SCxF+O3PRn1V4sP0mp6p7ADb31O31PtFUXJSkcf8aM1YKuhRTdMW+TpKE/sAhne9qeqpzqUge698g+atEmir3Z7telYwv8eI8V890NkZ0d98lIyCtmIfTCJdxdRfzHvE8WotSph0clQzkL4k/Djw6dG9OkXzS8X8f2Q16nSkS6ld/v7nAxn/LyQE3fdFQONkmzUHNjbC5EY3RVn02+phjsMPOXphCQvSLyGU+1EjIoQDIUFosVfDBYjq5i8FVh/b6AyEI97Czp7AIJk4pQ4wBHZnOe+JTmK1hgZfUbn7ZqR947rUISMFarz0/dBuVH4CbEkcJurWcUODuAwah6LTEy+ZGzOViy1RaqS1vSdYrpsPz8opayhJj37Rv7t2o6owHnStTbbk+aiMzM06AEbAYVW6wW8eXE/ywJWG4i8zjgUpQBJKZ7B7ZZj5/4DrwhSxhpn5KLVLyL/5VbXQYb4xBaM5vhSC7LKe8U/Wb87IIoyllWNsfDj7EfZF+vExNKjP1F574cjkE54qUwK7GqM/W7wnqnJTBHmeRXtn9ItAWOCfZ9ltszotuaAqID2DzxFyjNskVnm5bh4tBF8kpzH27LqVSoLozzZlp6wbYegAlGJKUVlN+uOWAnaVRXOohvrqdJIgxxasSA8iBkvRRCcnHG1uMTcdY5FRbNbJUmg17DYVf4iBqzKKxRQWM80vGZPuD3S5UE/GK7ikHL85FdHBgeaf1q0NieNZzYA8UVcuHKdaevoygzDmLLZmjX78a+Bwvm9t0IlrOIrXV2+nIHhs5ntu7VE+nE7Dqmlccu+ChvCYCfZu3sSDl4sLiv1YhyNb56ChGZZAlwMuhxf/pJ26pT+IBYj0GdFOGVkT2CIkdFma8VcvB8VcE2Kr7HGzxDvwPG+SoLENQ5CIEA3V9NZKNuPTRqTH4291ss1jCDNtilWmz46J+pfMefbHEMGQofhT5F89FWZ9g6aoGNOeSIdwJAbzov6CzCk7JPS/v77V1xyZU/6MYX6vkCgW8lsvag4GSc61P+54ifC2pYDzNw7OYPG1eK3zbTN/04rHyjkj5IGFfzCTr9OUPpJTXGwjp3XKZQrkGqiITVW6BaeoBrAFJ/VLcloVqvcADX9ve37HEVtJ/rIF3xThHIf90YvgJM9R2kN5Kty0axRzC78m5RSIs/JeFlYSz+JlgYnfX0EbhFxowNCedWEsU/EE5peMNpq2Tx3TeByNPi8C8+48J/a7c8ykNJx9C7SWU8JQ0m/45ZTT3NZJ8m3JuQhstdq26jqDDtZ5bMoX+aPwWzK6xLUx4phFaIPbwD3/3jUqJTUr38kxFC5xJ1RqZuPnEBpIhFvOadDDtnuZwkjjs5iz9FBWG9eM8DZfm1F7+PalRYLALwDBbSSYRkOmV9ebotaEMYTMJFHRILqfKQhWK6lgacAZn8hU+1nqRXbaOENZCh9xaEIbr1+9IQiHkc8NQZ5WzpZHyJ8SuJ2Cx6IVEw66dXXGmaAW0+haAcunCrrDewlEh2G25grAypg7bzByPnfE02OXfyJ+Rw2xqVMQiaFxkkELbZdxjec+f9MPVWeQxVJAwQYpE4WR3Q1TZb+jYXyXged1JYiiHh2kiPzh9b6F0xlF1epKKusHVcVREpl6GKtjqFVWu/S1sPIQQFNXy2r+z04dywvyF5SHdLzAQVdXozbD7v8MHNA7ZXTSACXOz0kil9WmZpo5STJe+NRaRTuKJE2J/R/nk5+rzf2qE2+ntkl9EUkA/LU8p/U74u+7J8oBfotOBLgjwg6V6sTuOB16LbFnasv/yhEstbcfcv7/SDH+OkVbubZhdqmJQf2hHRO5XCJ5KAec9Uq4m9kVyWv6cufeW3TUnSZPYbVSzKnIDsshS6qvxX8ExkNrBzQKh12hbAIsiLC9XsqARC2WXC0GkoaAtYRuZH+fW41Y/S5l/JAsezaBtYkxpslO5Ig5ZRRWjq0wJCKR3cvneffhz07pfAT04BojMDk8wrHZN39P6shWfvrroa6CuZKA/JYT2et5vXUNREB3ogbR+dr8+aN9JHAN1xR5cq2O9iAPdqhRvq4mSw03tif2IBEggBNCt96hZJSFcfqRwmRYqAnTAUZnKZsPOMxSaM4nrWAuPYzc1ee29PlXgL1qHT1/hyFdk/RTyVJOp19O3ty4Myfj8LtQDlEuljM1j7NWbrAGHlG/H2jRHiZRQyKYNLOuIKrcB4Tww9ytD58JLyuFkcFVjv+xpmDYM327h1CLlg7Xen+/ZdgyZ82NXSdHHxP7/f49DwvYvv9scY/mDwirEQdKMpBzZR6u8caboROoIqMhA9VEXXsCvJSIqzrcvtBbc5vyPsLhdSnFdB4LZrE9ogXsKaX1PihG5OkZ1xRgdGn2O2kaAimhwqmB31pQRKRzdQgfTFLNWP5jbj2YJRABwvYUC3Nr8NXour5Lys7t7RcascjHUPSqwqEwopC6AY09IqmI1tJedUho7fV4xlUDhe5vw/EprZIQYW78Il8qJOKCBMdarieYttPRt6n7qM0TATaWGvSjVNZhF/DJRqKwKTAHuqtKIukT8y7VuJLCMMdIalYOEmGrlUXBH1GbkTiAGQEzFyVGVObz2PypDQ51OTR1eQZWJTG6M93DPCWGcyw8RaN6xFVTnpnPPLbOpiTAGV/fuCmbTyZvbA02LEthjgSIHTuYZOuQrsuKKGXsB0BLfHh/I6ZzUCs1OkjPgX9A0BcuMEmc25MMFbP55oOPq8/0+CN44HRk/FW95UfJ1qthWD7vfxOXD2lpXAeBTNvZ4azghaFY0jU6DA0cDvM8z7h+IsXxxPI+/kGI0tf6apSiJc7BzM4ou2v1bcTpwI+bNoxYDcgfiLNRkJ32iJMb2EtlvCKwB3ycM7llLlsOWtvY5pggJGhNexcBktV66GPwte5Xf1nU+kAItc8VFDRORZbfykRCuHPiwEkHedgwKI0wJcJpcu4Q+PfapKh+zXVzFHCUe8KIPgrdZ4kZZ2F5JoNeD1v74MeCwnoyZZJiXtGMWFRvxSnNeuXHFB6ea5g9IdP0sFqUoAvgeCkPIkqrpAPsX17S3AMXG8PzEC6xsEFBg/feNNLBReP9EpE8t0K0TKwQkkxY0Fkw56Fex8T0pv9zfq+GYAZrKR7DKfXMzCDaUIZdmADgNQQY+hJAwIoYs+r7bwvI0P/nQP3k1IsPh7RaeZgSC1POUvp87cfSTyN/7iJoWLpSEKJFuu7HmwRfAQVu1oCv96iJVYrzF+GeQhdl8G3VD6d9eUiaszgLuQaJAuIvC+SS9BP++iabpCY/9cVa/cp+ETgXFT9ME9pE1Nl30BoPQ0t0nEVvzVGIx65QoV1dJKUInHO/jR5BIgXRA4cKtjOZspn7f+K5sAdVgHOSP6q9B9+nfKcaTncCptvpbXz7wUNfrH8LvSS4SMsG/ZHGkiuXhpE+aFJGi2RvdCQquhhjP7AizjZPbQM0MSmduB917/dCgdWkDSwLRNqom5kY98KJekAleM44pNA/L0/JNYsIWLL1t+3asAWdEWSmYqiUu/5G+5YKIsS5yz51wO6g/s8WfCo33aRVr0ERPuyFPLb3iT09P5nElmSDYqWUHntfzrjl9ExKZwOSSQasFvFw==,iv:X6nu9sfY9IHoZs/5uMkzjqXGq8tgPuUb7IBL7P7jC+I=,tag:53x31IAolDJXjTVQ290Juw==,type:str] + config.appservice.yaml: ENC[AES256_GCM,data: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,iv:FQDmP9lB/xCG02QMwvxOoAuj67o9VHw5dD6RLkkAF9c=,tag:qnARvlnWqPa4z5UFCKYFpQ==,type:str] + draupnir-registration.yaml: ENC[AES256_GCM,data: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,iv:9V1H8EU+LzQ/6Vj2PlgltprGlMoZhDamWriQXgW5dpk=,tag:XhEVEAoLsGe573Pny0C7cQ==,type:str] + draupnir-config.yaml: ENC[AES256_GCM,data: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,iv:Qsg6zVZCorKZB70rYlEHST7VVLqU3Hq4OWfnX8+9GPU=,tag:zjwlPJ8e3SRrakNig9e3aw==,type:str] sops: kms: [] gcp_kms: [] @@ -17,14 +17,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiK1NxU2NrSG5qZTB3azlk - akgwb3B6Z0FWaVdGWmVNQnpOWXFremc1ZlZjCi9zZEc0U0VVV2tLOWVBbDhyRmsy - OWxsOFZyUktUK0hKTkd1R0hiVTViMWsKLS0tIHZyMG1SVzNsMTBpUU8vNHpMSmR3 - WWZEUFEyRThhYlBHTG9IakYrRzdnaEEKTJZyGxHGi76bKHJ5HX+3rowKUVFPTfs0 - 9udNUwIwd3DUHtvqCM8ACvJYW35S1YW4lrAo+ann661+f5g225yfsg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQV21lRWNsODNpYStjcGRp + aUIvSE41UHpKM3FRVHZXbVBnRGl2QUFVTHg4CmsrNXBPZ3ZNc3NyVGZqcitlVnNm + TVlRcWhOUWlxZFZqWlg2azVOekxwcG8KLS0tIHlQcHc5dFVxMVF6WFJUT2J2YXBy + VUtmaElGZzdVUVlPSXNHS0NYN0tQUDAKq7df0tZqJ2XQLRZXOb9wU3v3Wh0QKMGw + iv46MKAeqw9FCNDlwpGiIo60Vc+WW40NO8fn7bxsp7wTNC8hvK5s7w== -----END AGE ENCRYPTED FILE----- - lastmodified: "2023-09-12T18:17:46Z" - mac: ENC[AES256_GCM,data:NjrJ30MjdkDHtTilDlPOGcGJ6gnfsAt3IHNW4/exaQO7OGHv9soO8wTmdk64KwKPxCNX2jLTM2PSSMrPylz2fsGsAbzzyixf/3MO2243UEdHwIWYg8Xz3o98EO/5hQllotuokhMlS8oFFKru37UB5Ix5P4Lh0h4qPTdwKlPlrrk=,iv:FHiWQHgy5vLRS9dqqBIU/GQ7j2aoE2/W0D6JYvtTayA=,tag:InFCYwjw+yv+AGvqG63OXw==,type:str] + lastmodified: "2023-11-18T22:00:40Z" + mac: ENC[AES256_GCM,data:KySLO6G644wJVNWaAxII0ph2Wx+50iXGSC83TwrhOYqoSCVAs3ekltu6ZuwBObtGWLOvQvaqX0TwfrA5cy/AGmCGPbqI/WRfzvFjvboJtN3RAnn0TLXKjq5eV9dNgAzZtuugq+mWTE3F1WAzPfGbbK5vEQNuNVEy9OhgrLvGr/I=,iv:h57p2uS6MCtiNH4pLU9yjtJMJBV4X0RZWOyjBUMgb2Y=,tag:S4CeFvb8jQYbkEa7AWs4wA==,type:str] pgp: [] encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ version: 3.7.3 diff --git a/apps/production/secrets/kustomization.yaml b/apps/production/secrets/kustomization.yaml @@ -14,3 +14,4 @@ resources: - draupnir-appservice-secret.yaml - zammad-postgres-secret.yaml - prometheus_asterisk_secret.yaml + - parseable-secret.yaml diff --git a/apps/production/secrets/parseable-secret.yaml b/apps/production/secrets/parseable-secret.yaml @@ -0,0 +1,34 @@ +apiVersion: v1 +kind: Secret +metadata: + name: parseable-env-secret + namespace: parseable +type: Opaque +stringData: + addr: ENC[AES256_GCM,data:OdjnuN/h45NEn7QE,iv:Mty+u0eyUJhYGCe5uCNwO5O/2+mWUzGLgeM2KV2tcws=,tag:fbBLCfBR7tahiPF/G26aMg==,type:str] + staging: + dir: ENC[AES256_GCM,data:2maJNKAPhpuD,iv:DMW6umpw15UbMkhFy5oS+r+hBM5WjLR+iHshn0btZuA=,tag:PjdZt+dpYqY/HekiO0a15Q==,type:str] + fs: + dir: ENC[AES256_GCM,data:NYdrJDRK,iv:RkFDDBqNYqiLWmbDdEL9DAKx7+hD7BIPk9Ti/upQuWU=,tag:xC1Vfh+f3uwsRr2KtWnnRQ==,type:str] + username: ENC[AES256_GCM,data:9R1gifS5vA==,iv:HPqjeTERcRZWPU2mYUljSX8ZnW7xU/Rpb0EkhZF/uXk=,tag:72JdEX9dRu8G8PZ5uvRPpQ==,type:str] + password: ENC[AES256_GCM,data:V5QvycUe/gPC1clJicnpdvEAIBRJnEo3yuwkr3fN+eATIznSJ+iuUmQVJncNMgJJ/CWU9ju3yUg0ekEZB2F+ig==,iv:5QwXxquSbCesahY/X8frkVsaZoV3M0pdpmjWJ5UaeEE=,tag:lJ+1lYcNiEhBTwcHpvt+XQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKclpzSHM5NW9XckJRV3hU + WDBRNTdGd1FZU3N4ZFJLaXV6WGpKOUJ6MG1VClZPQUlqSzBWRGUxUG9ZZGt0OWdG + UHMycDRRODUybmU5cUlISTl5YWtCSjgKLS0tIDRYM01Xa3pGOGtHVzN0ZTZmVHRD + aFJEOEpqRktSQitHUkl4RGg4dmswOVEK9NFkPUKfIpF9kSgLy+RTKuPgBwcR7w1H + PGY0fn/loCDGeLP9xab22aC4YhqBXliitcqh0Tonk9o/B8L5wljmzQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-11-18T22:07:37Z" + mac: ENC[AES256_GCM,data:WyPyHIyxexMTUrRi2Tz/Jda1/qMFGhqqk8Ta2gfNDIDNO9bVJ814dBcptz4ufcsXL3uYptp9lT1caLiO7UfqIQxtAGseQ+SFQKA9cNw/+e8Yf5Sy0Wl4u2yM0DOPHDMfOH5BoDuf3LmBdi1tPdTK4Vy4ciseF0eBw0Yd7YeUonc=,iv:E+O3635XAr54ikHtUzIddfTuwvOBtrqiNyv/lBMeJz4=,tag:2ZvFpRDKF5DiPGTZXxYzqw==,type:str] + pgp: [] + encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ + version: 3.7.3 diff --git a/apps/production/vector-values.yaml b/apps/production/vector-values.yaml @@ -0,0 +1,76 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: vector + namespace: vector +spec: + chart: + spec: + version: 0.29.0 + values: + # customConfig -- Override Vector's default configs, if used **all** options need to be specified. This section supports + # using helm templates to populate dynamic values. See Vector's [configuration documentation](https://vector.dev/docs/reference/configuration/) + # for all options. + customConfig: + transforms: + modify: + type: remap + inputs: + - kubernetes_logs + source: | + . = parse_json!(.message) + data_dir: /vector-data-dir + api: + enabled: true + address: 127.0.0.1:8686 + playground: false + sources: + kubernetes_logs: + type: file + include: + - /var/run/cilium/tetragon/tetragon.log + sinks: + parseable: + type: http + method: post + batch: + max_bytes: 10485760 + max_events: 1000 + timeout_secs: 10 + compression: gzip + inputs: + - modify + encoding: + codec: json + uri: http://parseable.parseable.svc.cluster.local/api/v1/ingest + auth: + strategy: basic + user: MTRNord + password: ENC[AES256_GCM,data:ErE9OBUngFMWk8CmwV8xRQZi59masyLVJhs2CSuEHPUWD7CZcK6ykS8rkBN1qgNzKqJepbiiKDJVWc1f2gpP2g==,iv:OdlBNGY3XTWbrNFqkIoMa+BPS0IzHa/dDGqffgIgkDI=,tag:t9aE/2W/AGxtb+JGg0LmBw==,type:str] + request: + headers: + X-P-Stream: tetrademo + healthcheck: + enabled: true + path: http://parseable.parseable.svc.cluster.local/api/v1/liveness + port: 80 +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhbUFmYVJtRDQ4R1UvU2hD + dFhJVEVDdkQ3Z3dHcVE4MHRIVWdDd1d4VlNjCm5yMTdQMzFYWStTaUdGSzhBaHcv + ekh3SkRYR3VnZ05vd1NpczdzdVBzSkEKLS0tIDFWMFByZXFuYVY3Zmg2MzdYMnFS + SjVqenlCTnJIa1FTSzB2eWVEaHVTUlEKdsGMuOJLYEaApA2UGHfJu+b9D9GBlE5b + G8J9gYTTXVsBnQCod9rEJbcjLxJaP9YMWo0ZLzAhjNdHi1gd2I7cyQ== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2023-11-18T22:07:45Z" + mac: ENC[AES256_GCM,data:c6nFNSOfE/0GmFiAlumSEaCvuE4QcBZG7hss5h03OvD2P6+xbLAuURMfWmZWYqKHMo273nSTyQUTlMttV+L41TlFCCw7PS7pKZSVJwWOKtjIdV/5YEKw9xQeLKhXHzFzC+I28WTzEvDPI7aJC9ij+ymA8k+GMjc6EtrnT5tMLeg=,iv:oZ11nGoFG4eDibh5ESrGwD9rBDAX52QZBMluz3XhVFg=,tag:6ySCxh/IuIwV+z/XmNX5Uw==,type:str] + pgp: [] + encrypted_regex: ^(privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$ + version: 3.7.3