You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
83 lines
2.2 KiB
YAML
83 lines
2.2 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: filebeat
|
|
namespace: kube-system
|
|
labels:
|
|
k8s-app: filebeat
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
k8s-app: filebeat
|
|
template:
|
|
metadata:
|
|
labels:
|
|
k8s-app: filebeat
|
|
spec:
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
effect: NoSchedule
|
|
serviceAccountName: filebeat
|
|
terminationGracePeriodSeconds: 30
|
|
hostNetwork: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
containers:
|
|
- name: filebeat
|
|
image: docker.elastic.co/beats/filebeat:7.17.3
|
|
args: [
|
|
"-c", "/etc/filebeat.yml",
|
|
"-e",
|
|
]
|
|
env:
|
|
- name: NODE_NAME
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: spec.nodeName
|
|
securityContext:
|
|
runAsUser: 0
|
|
# If using Red Hat OpenShift uncomment this:
|
|
#privileged: true
|
|
resources:
|
|
limits:
|
|
memory: 200Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 100Mi
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /etc/filebeat.yml
|
|
readOnly: true
|
|
subPath: filebeat.yml
|
|
- name: filebeat-certs
|
|
mountPath: /usr/share/filebeat/config/certificates
|
|
readOnly: true
|
|
- name: data
|
|
mountPath: /usr/share/filebeat/data
|
|
- name: containerlogs
|
|
mountPath: /var/lib/docker/containers
|
|
readOnly: true
|
|
- name: varlog
|
|
mountPath: /var/log
|
|
readOnly: true
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
defaultMode: 0640
|
|
name: filebeat-config
|
|
- name: containerlogs
|
|
hostPath:
|
|
path: /var/lib/docker/containers
|
|
- name: varlog
|
|
hostPath:
|
|
path: /var/log
|
|
# data folder stores a registry of read status for all files, so we don't send everything again on a Filebeat pod restart
|
|
- name: data
|
|
hostPath:
|
|
# When filebeat runs as non-root user, this directory needs to be writable by group (g+w).
|
|
path: /var/lib/filebeat-data
|
|
type: DirectoryOrCreate
|
|
- name: filebeat-certs
|
|
secret:
|
|
secretName: filebeat-certs
|