Puppet Class: profile::rsyslog::kubernetes

Defined in:
modules/profile/manifests/rsyslog/kubernetes.pp

Overview

SPDX-License-Identifier: Apache-2.0

Parameters:

  • enable (Boolean) (defaults to: lookup('profile::rsyslog::kubernetes::enable', { 'default_value' => true }))
  • kubernetes_cluster_name (String) (defaults to: lookup('profile::kubernetes::cluster_name'))
  • kafka_brokers (Array) (defaults to: lookup('profile::rsyslog::kafka_shipper::kafka_brokers')) 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'modules/profile/manifests/rsyslog/kubernetes.pp', line 3

class profile::rsyslog::kubernetes (
    Boolean $enable                 = lookup('profile::rsyslog::kubernetes::enable', { 'default_value' => true }),
    String $kubernetes_cluster_name = lookup('profile::kubernetes::cluster_name'),
    Array $kafka_brokers            = lookup('profile::rsyslog::kafka_shipper::kafka_brokers'),
) {
    include profile::rsyslog::shellbox

    $k8s_config = k8s::fetch_cluster_config($kubernetes_cluster_name)

    apt::package_from_component { 'rsyslog_kubernetes':
        component => 'component/rsyslog-k8s',
        packages  => ['rsyslog-kubernetes'],
    }

    $ensure = $enable ? {
      true    => present,
      default => absent,
    }

    $client_auth = profile::pki::get_cert($k8s_config['pki_intermediate_base'], 'rsyslog', {
        'ensure'          => $ensure,
        'renew_seconds'   => $k8s_config['pki_renew_seconds'],
        'names'           => [{ 'organisation' => 'view' }],
        'notify_services' => ['rsyslog'],
    })

    rsyslog::conf { 'kubernetes':
        ensure   => $ensure,
        content  => template('profile/rsyslog/kubernetes.conf.erb'),
        priority => 9,
    }

    # Enforce k8s- prefix on topics, some cluster names will lead to "k8s" duplication
    $log_topic_name = sprintf('k8s-%s', $kubernetes_cluster_name)
    $trusted_ca_path = profile::base::certificates::get_trusted_ca_path()

    # Dedicated per-k8s-cluster kafka topics. https://phabricator.wikimedia.org/T366710
    rsyslog::conf { 'output_kafka_k8s':
        ensure   => $ensure,
        content  => template('profile/rsyslog/output_kafka_k8s.conf.erb'),
        priority => 35,
    }
}