geoip enrichment for nginx/traefik Vector access-log pipelines #322

Open
opened 2026-08-02 16:24:31 +10:00 by unkinben · 0 comments
Owner

Problem
The nginx/traefik Vector transforms extract client_ip but there is no geoip enrichment — the aggregator has no MaxMind mmdb mounted and no enrichment_tables block.

Proposal

  • provision a MaxMind GeoLite2 mmdb into the aggregator pod (image bake or mounted secret/PVC; source via artifactapi)
  • add an enrichment_tables block + a remap enriching client_ip -> geo.country/city/asn on the nginx/traefik transforms
  • add vector test fixtures for the enrichment

Acceptance

  • access-log rows in logs.raw carry geo fields; vector test + CI green; no missing-mmdb break.
**Problem** The nginx/traefik Vector transforms extract client_ip but there is no geoip enrichment — the aggregator has no MaxMind mmdb mounted and no enrichment_tables block. **Proposal** - provision a MaxMind GeoLite2 mmdb into the aggregator pod (image bake or mounted secret/PVC; source via artifactapi) - add an enrichment_tables block + a remap enriching client_ip -> geo.country/city/asn on the nginx/traefik transforms - add vector test fixtures for the enrichment **Acceptance** - access-log rows in logs.raw carry geo fields; vector test + CI green; no missing-mmdb break.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#322