Read brusnika-stage OpenObserve auth from Vault file in otel
This commit is contained in:
parent
07aeb166ba
commit
ad6e4bbe23
@ -8,26 +8,6 @@ spec:
|
||||
disableWait: true
|
||||
upgrade:
|
||||
disableWait: true
|
||||
postRenderers:
|
||||
- kustomize:
|
||||
patches:
|
||||
- target:
|
||||
group: apps
|
||||
version: v1
|
||||
kind: DaemonSet
|
||||
name: otel-collector-agent
|
||||
patch: |-
|
||||
- op: replace
|
||||
path: /spec/template/spec/containers/0/command
|
||||
value:
|
||||
- /bin/sh
|
||||
- -ec
|
||||
- op: replace
|
||||
path: /spec/template/spec/containers/0/args
|
||||
value:
|
||||
- |
|
||||
export OPENOBSERVE_BASIC_AUTH="$(cat /vault/secrets/openobserve-basic-auth)"
|
||||
exec /otelcol-contrib --config=/conf/relay.yaml
|
||||
dependsOn:
|
||||
- name: prometheus-stack
|
||||
namespace: prometheus-stack
|
||||
@ -47,7 +27,7 @@ spec:
|
||||
vault.hashicorp.com/agent-inject-secret-openobserve-basic-auth: secrets/data/vault/apps/openobserve
|
||||
vault.hashicorp.com/agent-inject-template-openobserve-basic-auth: |-
|
||||
{{ "{{- with secret \"secrets/data/vault/apps/openobserve\" -}}" }}
|
||||
{{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
|
||||
Basic {{ "{{ index .Data.data \"OPENOBSERVE_BASIC_AUTH\" }}" }}
|
||||
{{ "{{- end -}}" }}
|
||||
mode: daemonset
|
||||
fullnameOverride: otel-collector
|
||||
@ -89,7 +69,7 @@ spec:
|
||||
otlphttp/openobserve:
|
||||
endpoint: http://openobserve-web.openobserve.svc.cluster.local:5080/api/default
|
||||
headers:
|
||||
Authorization: Basic ${env:OPENOBSERVE_BASIC_AUTH}
|
||||
Authorization: ${file:/vault/secrets/openobserve-basic-auth}
|
||||
tls:
|
||||
insecure: true
|
||||
service:
|
||||
|
||||
Loading…
Reference in New Issue
Block a user