-
Notifications
You must be signed in to change notification settings - Fork 14
/
Copy path2-loki-tls.yaml
157 lines (157 loc) · 3.87 KB
/
2-loki-tls.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
apiVersion: v1
kind: ConfigMap
metadata:
name: loki-config
data:
local-config.yaml: |
auth_enabled: false
server:
http_listen_port: 3100
http_tls_config: &tls_server_config
cert_file: /var/serving-cert/tls.crt
key_file: /var/serving-cert/tls.key
grpc_listen_port: 9096
http_server_read_timeout: 1m
http_server_write_timeout: 1m
log_level: error
target: all
common:
path_prefix: /loki-store
storage:
filesystem:
chunks_directory: /loki-store/chunks
rules_directory: /loki-store/rules
replication_factor: 1
ring:
instance_addr: 127.0.0.1
kvstore:
store: inmemory
compactor:
compaction_interval: 5m
frontend:
compress_responses: true
ingester:
chunk_encoding: snappy
chunk_retain_period: 1m
query_range:
align_queries_with_step: true
cache_results: true
max_retries: 5
results_cache:
cache:
enable_fifocache: true
fifocache:
max_size_bytes: 500MB
validity: 24h
parallelise_shardable_queries: true
query_scheduler:
max_outstanding_requests_per_tenant: 2048
schema_config:
configs:
- from: 2022-01-01
store: boltdb-shipper
object_store: filesystem
schema: v11
index:
prefix: index_
period: 24h
storage_config:
filesystem:
directory: /loki-store/storage
boltdb_shipper:
active_index_directory: /loki-store/index
shared_store: filesystem
cache_location: /loki-store/boltdb-cache
cache_ttl: 24h
limits_config:
ingestion_rate_strategy: global
ingestion_rate_mb: 4
ingestion_burst_size_mb: 6
max_label_name_length: 1024
max_label_value_length: 2048
max_label_names_per_series: 30
reject_old_samples: true
reject_old_samples_max_age: 15m
creation_grace_period: 10m
enforce_metric_name: false
max_line_size: 256000
max_line_size_truncate: false
max_entries_limit_per_query: 10000
max_streams_per_user: 0
max_global_streams_per_user: 0
unordered_writes: true
max_chunks_per_query: 2000000
max_query_length: 721h
max_query_parallelism: 32
max_query_series: 10000
cardinality_limit: 100000
max_streams_matchers_per_query: 1000
max_concurrent_tail_requests: 10
retention_period: 24h
max_cache_freshness_per_query: 5m
max_queriers_per_tenant: 0
per_stream_rate_limit: 3MB
per_stream_rate_limit_burst: 15MB
max_query_lookback: 0
min_sharding_lookback: 0s
split_queries_by_interval: 1m
---
apiVersion: v1
kind: Pod
metadata:
name: loki
labels:
app: loki
spec:
securityContext:
runAsGroup: 1000
runAsUser: 1000
fsGroup: 1000
volumes:
- name: loki-store
persistentVolumeClaim:
claimName: loki-store
- name: loki-config
configMap:
name: loki-config
- name: certs
secret:
secretName: loki
containers:
- name: loki
image: grafana/loki:2.6.1
volumeMounts:
- mountPath: "/loki-store"
name: loki-store
- mountPath: "/etc/loki"
name: loki-config
- mountPath: "/var/serving-cert"
name: certs
readOnly: true
securityContext:
seccompProfile:
type: RuntimeDefault
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
---
kind: Service
apiVersion: v1
metadata:
name: loki
annotations:
service.alpha.openshift.io/serving-cert-secret-name: loki
spec:
selector:
app: loki
ports:
- port: 3100
protocol: TCP
---
apiVersion: v1
kind: ConfigMap
metadata:
name: loki
annotations:
service.beta.openshift.io/inject-cabundle: "true"