Ben Vincent
595663bae9
Why: extend the Tier-1 structured-parsing survey with seven more high-value log sources so they land in logs.raw columns/.fields for real querying instead of the generic catch-all. Stacks on #318. How: - Seven mutually-exclusive app_route conditions + parse transforms wired into the ClickHouse sink: bind_query (k8s bind-* + VM named), rancher_audit (cattle-system sidecar JSON), cnpg_pg (ONE transform for all 10 CNPG clusters via the `.postgres` container), gitea (router + access, k8s + VM), puppet (openvoxserver/openvoxdb logback + access), litellm (JSON request logs), postfix (per-line maillog). - Carve `.postgres` out of the Tier-1 authentik route and the new puppet/gitea/litellm routes so the single cnpg_pg route claims every CNPG pod without double-insert (keeps app_route mutually exclusive). - Companion k8s config flips in this PR: litellm JSON_LOGS=True; bind `querylog yes` on both bind-internal BindClusters; gitea router+access logging to stdout. Rancher auditLog was already on. - 15 new vector test cases (routing + field extraction + the authentik-postgres->cnpg exclusivity proof); all 35 green (vector 0.57). - Structured fields go into the existing fields Map(String,String) — no DDL change. Puppet-side follow-ups (out of scope for argocd): enable named query logging (profiles/dns/server.pp); ship the VM vector rollout with the .file/.SYSLOG_IDENTIFIER tags for named/gitea/puppetserver(+multiline logback join)/postfix maillog. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
argocd-apps docs
Operational notes for the manifests in this repo.
| Doc | What it covers |
|---|---|
| cnpg-backups.md | How CNPG Postgres backups (WAL archiving + nightly base backups) to Ceph RGW are configured. |
| cnpg-restore.md | Restoring a CNPG cluster: full recovery, point-in-time recovery, cutover, and gotchas. |
| authentik-rancher-sso.md | Manual runtime step to point Rancher's OIDC auth at the canonical identity.unkin.net issuer and trust the internal CA. |
| gitea-migration.md | Staged cutover of the git.unkin.net forge from the Puppet VM to the gitea namespace. |