stacks

DevFW-CICD/stacks

Fork 2

Commit graph

d941d12bcd mkdir pupa miwr 2025-03-25 15:02:50 +01:00
c34d538073 /var/log/openbao/openbao/*.log { miwr 2025-03-25 14:08:02 +01:00
42be001b3c bao audit enable -path="file" file file_path=/openbao/logs/openbao/openbao.log miwr 2025-03-25 13:59:25 +01:00
278cf798f4 apiVersion: v1 kind: ConfigMap metadata: name: openbao-logrotate-config namespace: openbao data: openbao: | /var/log/openbao/*.log { size 5k rotate 7 compress missingok notifempty postrotate kill -SIGHUP $(pidof bao) endscript } miwr 2025-03-25 13:52:55 +01:00
5c197fd0f1 sidecar container detached miwr 2025-03-25 13:26:28 +01:00
bb3c6cf438 /openbao/logs/openbao/openbao.log miwr 2025-03-25 13:19:15 +01:00
2372cefe0b # bao audit enable -path="file" file file_path=/openbao/logs/openbao.log miwr 2025-03-25 13:13:39 +01:00
be7881e2ec test miwr 2025-03-25 13:03:29 +01:00
c6e71f8aeb logging setup miwr 2025-03-25 12:51:00 +01:00
547938acd4 - name: host-log hostPath: path: /var/log type: Directory miwr 2025-03-25 11:18:52 +01:00
7179d2568c Merge pull request 'feat(mailhog): IPCEICIS-3048 Implement mailhog in edp stacks' (#18) from feature/IPCEICIS-3048-Implement-mailhog-in-edp-stacks into development 1.1.1 1.1.0 richardrobertreitz 2025-03-24 17:19:22 +00:00
55435a3ad2 feat(mailhog): IPCEICIS-3048 - added documentation Bot 2025-03-24 17:09:44 +01:00
320e67a1d2 no liveness probe miwr 2025-03-24 14:50:16 +01:00
71a5463237 rm /tmp/init.txt bao audit enable -path="stdout" file file_path=stdout bao audit enable -path="file" file file_path=/openbao/logs/openbao.log miwr 2025-03-24 14:20:54 +01:00
4620a92aee # rm /tmp/init.txt miwr 2025-03-24 13:57:39 +01:00
5086db7cba 100 miwr 2025-03-24 13:50:33 +01:00
2c5cad03c8 sleep 10 miwr 2025-03-24 13:50:07 +01:00
aae508014a cat /tmp/init.txt | grep "Key " | awk '{print $NF}' | xargs -I{} bao operator unseal {} echo $(grep "Initial Root Token:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/initial_token.txt echo $(grep "Unseal Key 1:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key1.txt echo $(grep "Unseal Key 2:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key2.txt echo $(grep "Unseal Key 3:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key3.txt echo $(grep "Unseal Key 4:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key4.txt echo $(grep "Unseal Key 5:" /tmp/init.txt | awk '{print $NF}')| cat > /openbao/data/unseal_key5.txt bao login $(grep "Initial Root Token:" /tmp/init.txt | awk '{print $NF}') rm /tmp/init.txt miwr 2025-03-24 13:41:47 +01:00
8d7a7cb1bf bao operator init >> /tmp/init.txt miwr 2025-03-24 13:38:15 +01:00
8f28c30364 ### miwr 2025-03-24 13:33:13 +01:00
dcce720122 # bao audit enable -path="stdout" file file_path=stdout # bao audit enable -path="file" file file_path=/openbao/logs/openbao.log miwr 2025-03-24 13:32:40 +01:00
f39c8c979b livenessProbe: enabled: true execCommand: - /bin/sh - -c - bao status miwr 2025-03-24 13:12:46 +01:00
d41a27305e livenessProbe: enabled: true miwr 2025-03-24 12:54:27 +01:00
d0585fd2b7 feat(mailhog): IPCEICIS-3048 - mailhog deployed, ingress is https://<URL>/mailhog, forgje is configured Stephan Lo 2025-03-20 23:47:53 +01:00
4601d2f25d those command were deleted miwr 2025-03-20 16:18:43 +01:00
5f5ac62b0b touch /shared/main.alive; trap 'rm -f /shared/main.alive; exit 0' TERM; while true; do sleep 1; done miwr 2025-03-20 16:14:03 +01:00
3937c98d00 /openbao/logs/alive/main.alive miwr 2025-03-20 16:03:21 +01:00
d21c543f2c log-sidecar removed miwr 2025-03-20 15:50:04 +01:00
64677a02d1 url = "http://loki-loki-distributed-gateway.monitoring.svc.cluster.local/loki/api/v1/push" miwr 2025-03-20 15:14:01 +01:00
350398cb23 path_targets = [{"__path__" = "/openbao/logs/*"}] miwr 2025-03-20 14:44:48 +01:00
02c739524b config.alloy miwr 2025-03-20 14:39:03 +01:00
3db4058181 - key: "config.yaml" path: "/config.alloy" - key: "config.yaml" path: "/pupa/config.alloy" miwr 2025-03-20 14:34:51 +01:00
d866169744 - name: config-volume mountPath: /etc/alloy items: - key: "config.yaml" path: "config.alloy" miwr 2025-03-20 14:28:27 +01:00
267a04fee5 mountPath: /etc/alloy items: - key: "config.yaml" path: "config.alloy" miwr 2025-03-20 14:23:57 +01:00
c376f6d0c6 - --config.file=/var/lib/alloy/config/config.yaml miwr 2025-03-20 14:09:45 +01:00
39eab1ef93 - name: config-volume configMap: name: sidecar-container-alloy-config miwr 2025-03-20 14:00:59 +01:00
ec2fc47ea2 mountPath: /var/lib/alloy miwr 2025-03-20 13:52:04 +01:00
2058f6a36b mountPath: /var/lib miwr 2025-03-20 13:48:12 +01:00
87522c11db /var miwr 2025-03-20 13:39:35 +01:00
88df4ea8f4 runAsUser: 100 miwr 2025-03-20 13:30:37 +01:00
6385e39067 /openbao/logs/pupa2 miwr 2025-03-20 13:12:50 +01:00
005f7503ce mountPath: /var/lib/alloy/data miwr 2025-03-20 13:05:44 +01:00
140dddd955 mountPath: /var/lib/alloy/data miwr 2025-03-20 12:58:23 +01:00
285e823936 path_targets = [{"__path__" = "/var/log/*"}] miwr 2025-03-20 12:55:00 +01:00
c9c67a9d54 name changes miwr 2025-03-20 12:36:57 +01:00
0dbf646477 alloy is back miwr 2025-03-20 12:36:18 +01:00
5843e9498b targets = local.file_match.openbao_file_logs.targets miwr 2025-03-20 11:33:08 +01:00
3e1b284e3b local.file_match "openbao_file_logs" { path_targets = [{"__path__" = "/openbao/logs/*"}] sync_period = "5s" } miwr 2025-03-20 11:26:21 +01:00
a5ec02205a bao audit enable -path="stdout" file file_path=stdout bao audit enable -path="file" file file_path=/openbao/logs/openbao.log miwr 2025-03-20 11:03:57 +01:00
974e0182cc # touch /openbao/logs/openbao.log # bao audit enable file file_path=/openbao/logs/openbao.log miwr 2025-03-20 10:45:12 +01:00
d51e0859a9 touch /openbao/logs/openbao.log miwr 2025-03-19 16:34:32 +01:00
1bf5b468bc bao audit enable file file_path=/openbao/logs/openbao.log miwr 2025-03-19 16:25:16 +01:00
e7d693465d mountPath: /openbao/logs miwr 2025-03-19 15:02:47 +01:00
12d35ad1e9 touch /var/log/openbao.log chmod 644 /var/log/openbao.log chown openbao:openbao /var/log/openbao.log bao audit enable file file_path=/var/log/openbao.log removed miwr 2025-03-19 14:48:25 +01:00
5ffb47d1ca volumeMounts: - mountPath: /var/log/test name: log-storage readOnly: false miwr 2025-03-19 14:44:29 +01:00
e72e440e51 volumeMounts: - mountPath: /var/log/test name: plugins readOnly: false miwr 2025-03-19 14:40:57 +01:00
ff72720654 volumes: - name: log-storage emptyDir: {} miwr 2025-03-19 14:35:18 +01:00
ac4d10d619 # volumeMounts: # - mountPath: / # name: plugins # readOnly: false miwr 2025-03-19 14:30:00 +01:00
d946b419e7 volumeMounts: - mountPath: / name: plugins readOnly: false miwr 2025-03-19 14:27:04 +01:00
da3624d82a volumeMounts: - mountPath: /var/log/test name: plugins readOnly: false miwr 2025-03-19 14:20:57 +01:00
cba0a236f5 volumes: - name: log-storage path: /var/log/test miwr 2025-03-19 14:14:07 +01:00
0971384fd2 emptyDir: {} miwr 2025-03-19 14:06:21 +01:00
4d93d50874 volumes: - name: log-storage path: /var/log/test miwr 2025-03-19 13:58:20 +01:00
8f7ccf5fa7 mountPath: /var/log/test miwr 2025-03-19 13:53:13 +01:00
1938cc8f44 - name: init-log-permissions image: busybox command: ["sh", "-c", "chown -R 1000:1000 /var/log && chmod -R 775 /var/log"] volumeMounts: - mountPath: /var/log name: log-storage miwr 2025-03-19 13:24:40 +01:00
80ca890f5f - name: init-log-permissions image: busybox command: ["sh", "-c", "chown -R 1000:1000 /var/log && chmod -R 775 /var/log"] securityContext: runAsUser: 0 volumeMounts: - mountPath: /var/log name: log-storage miwr 2025-03-19 13:20:34 +01:00
18d03cee74 runAsUser: 1 miwr 2025-03-19 11:47:50 +01:00
7efc8124b0 runAsUser: 0 miwr 2025-03-19 11:39:53 +01:00
3cd6a846b2 securityContext: runAsUser: 1001 miwr 2025-03-19 11:35:16 +01:00
3d39948468 command: ["/bin/sh", "-c", " while true; do echo 'Hello' sleep 5; done "] miwr 2025-03-19 11:18:38 +01:00
055713e4a5 command: ["/bin/sh", "-c", " while true; do echo 'Hello' sleep 5; done "] miwr 2025-03-19 11:02:44 +01:00
0b5b2b25fd touch /var/log/openbao.log chmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.log miwr 2025-03-19 10:47:00 +01:00
3bb9b4b059 while true; do echo 'Hello' sleep 5; done "] miwr 2025-03-19 10:33:33 +01:00
fb0eebef13 no exit miwr 2025-03-19 10:26:14 +01:00
1c71f8555d # while kill -0 $(pidof openbao) 2>/dev/null; do sleep 1; done; # echo 'OpenBao has crashed - giving Alloy time to collect logs...' >> var/log/openbao.log; # sleep 20; # echo 'Sidecar exiting.'; # exit 1; miwr 2025-03-19 10:25:44 +01:00
abdbcff9fd while kill -0 $(pidof openbao) 2>/dev/null; do sleep 1; done; echo 'OpenBao has crashed - giving Alloy time to collect logs...' >> var/log/openbao.log; sleep 20; echo 'Sidecar exiting.'; exit 1; miwr 2025-03-19 10:18:19 +01:00
ac3988f9ac touch /var/log/openbao.log chmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.log removed miwr 2025-03-18 14:34:59 +01:00
52f484d463 touch /var/log/openbao.log chmod 644 /var/log/openbao.log chown openbao:openbao /var/1og/openbao_audit.log bao audit enable file file_path=/var/log/openbao.log miwr 2025-03-18 14:28:14 +01:00
46d6a22b65 bao audit enable file file_path=/var/log/openbao.log miwr 2025-03-18 14:21:41 +01:00
bc189a53e0 image: alpine:latest miwr 2025-03-18 13:38:40 +01:00
e4611e967e busybox miwr 2025-03-18 13:35:34 +01:00
57779745e9 curlimages/curl:latest miwr 2025-03-18 13:12:09 +01:00
ef22f9e7be ["/bin/sh", "-c", "while kill -0 $(pidof main-container) 2>/dev/null; do sleep 1; done; echo 'OpenBao has crashed - giving Alloy time to collect logs...'; sleep 20"] miwr 2025-03-18 12:59:08 +01:00
8db5e5950d # volumeMounts: # - name: alloy-data # mountPath: /var/lib/alloy/data # securityContext: # runAsUser: 0 miwr 2025-03-18 12:47:09 +01:00
43b172d8d4 user 0 miwr 2025-03-18 12:14:27 +01:00
b7de02d293 # extraContainers: # - name: grafana-alloy # image: grafana/alloy:latest # ports: # - containerPort: 12345 miwr 2025-03-18 12:04:53 +01:00
815f6a2822 # volumeMounts: # - name: alloy-data # mountPath: /var/lib/alloy/data miwr 2025-03-18 12:00:36 +01:00
93fe631736 fsGroup: 1000 runAsGroup: 1000 runAsNonRoot: true runAsUser: 100 miwr 2025-03-18 11:51:26 +01:00
67876f18b9 runAsUser: 0 miwr 2025-03-18 11:39:10 +01:00
fba4846d53 fixes namespace in argocd-sso.yaml franz.germann 2025-03-18 10:39:59 +01:00
b54d689edb adds argocd application for forgejo-sso franz.germann 2025-03-18 10:38:37 +01:00
266dce0b6c adds argocd application for argocd-sso franz.germann 2025-03-18 10:18:29 +01:00
779df9fb9c Merge pull request 'openbao_logs_second_way' (#16) from openbao_logs_second_way into shipping_openbao_logs Michal.Wrobel 2025-03-18 09:17:40 +00:00
5d2df3db8e Merge pull request 'alloy_implementation' (#13) from alloy_implementation into development Michal.Wrobel 2025-03-18 09:03:25 +00:00
65b74abeda Merge branch 'development' into alloy_implementation Christopher.Hase 2025-03-18 08:52:51 +00:00
fc287acf58 Update template/stacks/ref-implementation/backstage-templates/entities/spring-petclinic/skeleton/.github/workflows/maven-build.yml richardrobertreitz 2025-03-17 21:50:50 +00:00
e993c274b0 runAsUser: 1000 # Run as non-root user fsGroup: 1000 miwr 2025-03-17 15:41:18 +01:00
46072b8f81 runAsUser: 0 miwr 2025-03-17 15:34:43 +01:00
8617e200ea securityContext: runAsUser: 1000 fsGroup: 1000 miwr 2025-03-17 15:30:50 +01:00
c30cf9f380 /tmp/alloy/data miwr 2025-03-17 15:26:17 +01:00