Read brusnika-stage OpenObserve auth from Vault file in otel
This commit is contained in:
parent
07aeb166ba
commit
ad6e4bbe23
@ -8,26 +8,6 @@ spec:
|
|||||||
disableWait: true
|
disableWait: true
|
||||||
upgrade:
|
upgrade:
|
||||||
disableWait: true
|
disableWait: true
|
||||||
postRenderers:
|
|
||||||
- kustomize:
|
|
||||||
patches:
|
|
||||||
- target:
|
|
||||||
group: apps
|
|
||||||
version: v1
|
|
||||||
kind: DaemonSet
|
|
||||||
name: otel-collector-agent
|
|
||||||
patch: |-
|
|
||||||
- op: replace
|
|
||||||
path: /spec/template/spec/containers/0/command
|
|
||||||
value:
|
|
||||||
- /bin/sh
|
|
||||||
- -ec
|
|
||||||
- op: replace
|
|
||||||
path: /spec/template/spec/containers/0/args
|
|
||||||
value:
|
|
||||||
- |
|
|
||||||
export OPENOBSERVE_BASIC_AUTH="$(cat /vault/secrets/openobserve-basic-auth)"
|
|
||||||
exec /otelcol-contrib --config=/conf/relay.yaml
|
|
||||||
dependsOn:
|
dependsOn:
|
||||||
- name: prometheus-stack
|
- name: prometheus-stack
|
||||||
namespace: prometheus-stack
|
namespace: prometheus-stack
|
||||||
@ -47,7 +27,7 @@ spec:
|
|||||||
vault.hashicorp.com/agent-inject-secret-openobserve-basic-auth: secrets/data/vault/apps/openobserve
|
vault.hashicorp.com/agent-inject-secret-openobserve-basic-auth: secrets/data/vault/apps/openobserve
|
||||||
vault.hashicorp.com/agent-inject-template-openobserve-basic-auth: |-
|
vault.hashicorp.com/agent-inject-template-openobserve-basic-auth: |-
|
||||||
{{ "{{- with secret \"secrets/data/vault/apps/openobserve\" -}}" }}
|
{{ "{{- with secret \"secrets/data/vault/apps/openobserve\" -}}" }}
|
||||||
{{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
|
Basic {{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
|
||||||
{{ "{{- end -}}" }}
|
{{ "{{- end -}}" }}
|
||||||
mode: daemonset
|
mode: daemonset
|
||||||
fullnameOverride: otel-collector
|
fullnameOverride: otel-collector
|
||||||
@ -89,7 +69,7 @@ spec:
|
|||||||
otlphttp/openobserve:
|
otlphttp/openobserve:
|
||||||
endpoint: http://openobserve-web.openobserve.svc.cluster.local:5080/api/default
|
endpoint: http://openobserve-web.openobserve.svc.cluster.local:5080/api/default
|
||||||
headers:
|
headers:
|
||||||
Authorization: Basic ${env:OPENOBSERVE_BASIC_AUTH}
|
Authorization: ${file:/vault/secrets/openobserve-basic-auth}
|
||||||
tls:
|
tls:
|
||||||
insecure: true
|
insecure: true
|
||||||
service:
|
service:
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user