-
Notifications
You must be signed in to change notification settings - Fork 2
/
flow-collector.yaml
150 lines (150 loc) · 3.46 KB
/
flow-collector.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
apiVersion: flows.netobserv.io/v1alpha1
kind: FlowCollector
metadata:
name: cluster
namespace: netobserv
annotations:
argocd.argoproj.io/sync-wave: "100"
spec:
agent:
ebpf:
logLevel: info
cacheMaxFlows: 100000
resources:
limits:
memory: 800Mi
requests:
cpu: 100m
memory: 50Mi
sampling: 50
imagePullPolicy: IfNotPresent
debug: {}
excludeInterfaces:
- lo
kafkaBatchSize: 10485760
cacheActiveTimeout: 5s
ipfix:
cacheActiveTimeout: 20s
cacheMaxFlows: 400
clusterNetworkOperator:
namespace: openshift-network-operator
forceSampleAll: false
ovnKubernetes:
containerName: ovnkube-node
daemonSetName: ovnkube-node
namespace: ovn-kubernetes
sampling: 400
type: EBPF
consolePlugin:
logLevel: info
port: 9001
register: true
resources:
limits:
memory: 100Mi
requests:
cpu: 100m
memory: 50Mi
portNaming:
enable: true
portNames:
'3100': loki
quickFilters:
- default: true
filter:
dst_namespace!: 'openshift-,netobserv'
src_namespace!: 'openshift-,netobserv'
name: Applications
- filter:
dst_namespace: 'openshift-,netobserv'
src_namespace: 'openshift-,netobserv'
name: Infrastructure
- default: true
filter:
dst_kind: Pod
src_kind: Pod
name: Pods network
- filter:
dst_kind: Service
name: Services network
imagePullPolicy: IfNotPresent
autoscaler:
maxReplicas: 3
metrics:
- resource:
name: cpu
target:
averageUtilization: 50
type: Utilization
type: Resource
minReplicas: 1
status: DISABLED
replicas: 1
deploymentModel: DIRECT
exporters: []
kafka:
address: kafka-cluster-kafka-bootstrap.netobserv
tls:
caCert:
certFile: ca.crt
name: kafka-cluster-cluster-ca-cert
type: secret
enable: false
insecureSkipVerify: false
userCert:
certFile: user.crt
certKey: user.key
name: flp-kafka
type: secret
topic: network-flows
loki:
timeout: 10s
maxRetries: 2
maxBackoff: 5s
tenantID: netobserv
staticLabels:
app: netobserv-flowcollector
url: "https://lokistack-sample-gateway-http.netobserv.svc:8080/api/logs/v1/network"
statusUrl: "https://lokistack-sample-query-frontend-http.netobserv.svc:3100/"
batchWait: 1s
authToken: FORWARD
minBackoff: 1s
tls:
caCert:
certFile: service-ca.crt
name: lokistack-sample-ca-bundle
type: configmap
enable: true
insecureSkipVerify: true
userCert: {}
batchSize: 10485760
namespace: netobserv
processor:
logLevel: info
port: 2055
metrics:
ignoreTags:
- egress
- packets
server:
port: 9102
tls:
type: DISABLED
resources:
limits:
memory: 800Mi
requests:
cpu: 100m
memory: 100Mi
profilePort: 6060
kafkaConsumerQueueCapacity: 1000
imagePullPolicy: IfNotPresent
kafkaConsumerAutoscaler:
maxReplicas: 0
status: DISABLED
enableKubeProbes: true
debug: {}
kafkaConsumerReplicas: 3
healthPort: 8080
dropUnusedFields: true
kafkaConsumerBatchSize: 10485760